⬆️ Bump regex from 1.12.3 to 1.12.4 #424
Workflow file for this run
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: actions-lint | |
| on: | |
| workflow_dispatch: | |
| pull_request: | |
| paths: | |
| - ".github/workflows/**" | |
| - ".github/actions/**" | |
| - ".github/actionlint.yaml" | |
| - ".github/zizmor.yml" | |
| push: | |
| paths: | |
| - ".github/workflows/**" | |
| - ".github/actions/**" | |
| - ".github/actionlint.yaml" | |
| - ".github/zizmor.yml" | |
| schedule: | |
| - cron: '15 13 * * 0' | |
| jobs: | |
| actionlint: | |
| name: Run actionlint | |
| runs-on: ubuntu-latest | |
| timeout-minutes: 60 | |
| permissions: | |
| contents: read # checkout | |
| checks: write # reviewdog annotations | |
| steps: | |
| - name: Checkout code | |
| uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 | |
| with: | |
| persist-credentials: false | |
| - name: Collect workflow files (excluding auto-generated release.yml) | |
| id: files | |
| run: | | |
| # release.yml is auto-generated by cargo-dist; modifications are overwritten on update | |
| files=$(find .github/workflows -maxdepth 1 -name '*.yml' ! -name 'release.yml' | sort | tr '\n' ' ') | |
| if [ -z "$files" ]; then | |
| echo "::error::No workflow files found to lint" | |
| exit 1 | |
| fi | |
| echo "targets=$files" >> "$GITHUB_OUTPUT" | |
| - name: Run actionlint | |
| uses: reviewdog/action-actionlint@6fb7acc99f4a1008869fa8a0f09cfca740837d9d # v1.72.0 | |
| with: | |
| fail_level: error | |
| filter_mode: nofilter | |
| reporter: github-check | |
| actionlint_flags: ${{ steps.files.outputs.targets }} | |
| zizmor: | |
| name: Run zizmor | |
| # Scans all workflows including auto-generated release.yml; | |
| # suppress false positives via zizmor.yml config if needed | |
| runs-on: ubuntu-latest | |
| timeout-minutes: 60 | |
| permissions: | |
| contents: read # checkout | |
| security-events: write # SARIF upload | |
| steps: | |
| - name: Checkout code | |
| uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 | |
| with: | |
| persist-credentials: false | |
| - name: Run zizmor | |
| uses: zizmorcore/zizmor-action@192e21d79ab29983730a13d1382995c2307fbcaa # v0.5.7 | |
| with: | |
| persona: pedantic |