37 lines
844 B
YAML
37 lines
844 B
YAML
|
name: Differential ShellCheck
|
||
|
on:
|
||
|
push:
|
||
|
branches: [ master ]
|
||
|
pull_request:
|
||
|
branches: [ master ]
|
||
|
|
||
|
permissions:
|
||
|
contents: read
|
||
|
|
||
|
jobs:
|
||
|
lint:
|
||
|
runs-on: ubuntu-latest
|
||
|
|
||
|
permissions:
|
||
|
security-events: write
|
||
|
|
||
|
steps:
|
||
|
- name: Repository checkout
|
||
|
uses: actions/checkout@v4
|
||
|
with:
|
||
|
# Differential ShellCheck requires full git history
|
||
|
fetch-depth: 0
|
||
|
|
||
|
- id: ShellCheck
|
||
|
name: Differential ShellCheck
|
||
|
uses: redhat-plumbers-in-action/differential-shellcheck@v5
|
||
|
with:
|
||
|
token: ${{ secrets.GITHUB_TOKEN }}
|
||
|
|
||
|
- if: always()
|
||
|
name: Upload artifact with ShellCheck defects in SARIF format
|
||
|
uses: actions/upload-artifact@v4
|
||
|
with:
|
||
|
name: Differential ShellCheck SARIF
|
||
|
path: ${{ steps.ShellCheck.outputs.sarif }}
|