Skip to content

Merge pull request #1293 from rubysec/dependabot/github_actions/githu… #2089

Merge pull request #1293 from rubysec/dependabot/github_actions/githu…

Merge pull request #1293 from rubysec/dependabot/github_actions/githu… #2089

Workflow file for this run

name: CI
on:
push:
branches: [ master ]
pull_request:
branches: ['**']
permissions: {}
jobs:
lint-actions:
name: GitHub Actions audit
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
with:
persist-credentials: false
- name: Run actionlint
uses: rhysd/actionlint@914e7df21a07ef503a81201c76d2b11c789d3fca # v1.7.12
- name: Run zizmor
uses: zizmorcore/zizmor-action@53290badfa369cb0bf7ad16342cb62c2fa47ac7b # v0.8.0
with:
advanced-security: false
tests:
runs-on: ubuntu-latest
name: Linter
steps:
- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
with:
persist-credentials: false
- name: Set up Python
uses: actions/setup-python@6d4fd22b20465ccc0f7354476588e8df7c9ca0e0 # v7.1.0
with:
python-version: 3.8
- name: Install yamllint
run: |
python -m pip install --upgrade pip
pip install yamllint
- name: Lint YAML files
run: yamllint gems rubies
- name: Set up Ruby
uses: ruby/setup-ruby@7f797815d8adceb1c412e7abefdd1ab4abc47a5f # v1.335.0
with:
ruby-version: 4.0
- name: Install ruby dependencies
run: bundle install --jobs 4 --retry 3
- name: Validate YAML
run: bundle exec rake lint