chore(actions)(deps): bump docker/setup-buildx-action from 3.12.0 to 4.1.0 #126
Workflow file for this run
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Docker / shell lint | |
| # Lints the container build inputs: Dockerfile (via hadolint) and any shell | |
| # scripts under docker/ (via shellcheck). These catch the class of regression | |
| # the behavioral docker-publish smoke test can't — unquoted variable | |
| # expansions, silently-failing RUN commands, etc. | |
| # | |
| # Rules and ignores are documented in .hadolint.yaml at the repo root. | |
| # shellcheck severity is pinned to `error` so SC1091-style "can't follow | |
| # sourced script" info-level warnings don't fail the job — the .venv | |
| # activate script doesn't exist at lint time. | |
| on: | |
| push: | |
| branches: [main] | |
| paths: | |
| - Dockerfile | |
| - docker/** | |
| - .hadolint.yaml | |
| - .github/workflows/docker-lint.yml | |
| # No paths filter — the job must always run so the required check | |
| # reports a status (path-gated workflows leave checks "pending" forever | |
| # when no matching files change, which blocks merge). | |
| pull_request: | |
| branches: [main] | |
| permissions: | |
| contents: read | |
| concurrency: | |
| group: docker-lint-${{ github.ref }} | |
| cancel-in-progress: true | |
| jobs: | |
| hadolint: | |
| name: Lint Dockerfile (hadolint) | |
| runs-on: ubuntu-latest | |
| timeout-minutes: 5 | |
| steps: | |
| - name: Checkout code | |
| uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 | |
| - name: hadolint | |
| uses: hadolint/hadolint-action@2332a7b74a6de0dda2e2221d575162eba76ba5e5 # v3.3.0 | |
| with: | |
| dockerfile: Dockerfile | |
| config: .hadolint.yaml | |
| failure-threshold: warning | |
| shellcheck: | |
| name: Lint docker/ shell scripts (shellcheck) | |
| runs-on: ubuntu-latest | |
| timeout-minutes: 5 | |
| steps: | |
| - name: Checkout code | |
| uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 | |
| - name: shellcheck | |
| uses: ludeeus/action-shellcheck@00cae500b08a931fb5698e11e79bfbd38e612a38 # v2.0.0 | |
| env: | |
| # Severity = error: SC1091 (can't follow sourced script) is info- | |
| # level and would otherwise fail when the venv activate script | |
| # doesn't exist at lint time. | |
| SHELLCHECK_OPTS: --severity=error | |
| with: | |
| scandir: ./docker |