Research-Stack/4-Infrastructure/servo-fetch/.github/workflows/lint-workflows.yml

43 lines
1.1 KiB
YAML

name: Lint Workflows
on:
pull_request:
paths: ['.github/workflows/**', '.github/actionlint.yml']
push:
branches: [main]
paths: ['.github/workflows/**', '.github/actionlint.yml']
permissions: {}
concurrency:
group: lint-workflows-${{ github.ref }}
cancel-in-progress: true
jobs:
actionlint:
name: actionlint
runs-on: ubuntu-24.04
timeout-minutes: 5
permissions:
contents: read
steps:
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
with:
persist-credentials: false
- name: Run actionlint
run: |
bash <(curl -fsSL --retry 3 https://raw.githubusercontent.com/rhysd/actionlint/main/scripts/download-actionlint.bash) 1.7.12
./actionlint -color
zizmor:
name: zizmor
runs-on: ubuntu-24.04
timeout-minutes: 5
permissions:
contents: read
security-events: write
steps:
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
with:
persist-credentials: false
- uses: zizmorcore/zizmor-action@b1d7e1fb5de872772f31590499237e7cce841e8e # v0.5.3