You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Can we adopt some automated tooling that would flag issues like this and help us to fall into the pit of success here? One option is https://github.com/rhysd/actionlint I've not tried it out yet but it looks like this would have caught that issue in CI.
Are there other options we should evaluate?
The text was updated successfully, but these errors were encountered:
I gave it a quick search and couldn't find a better fitting repo, Its the first time i see actionlint tho so I can't tell much about it.
I am for adding a linter to github actions changes.
I might run it in my fork to test it out later.
Seems like there's some good 3rd party options out there based on what's been shared here, though the more I think about it the more I'm surprised GitHub doesn't have something built into the platform that highlights such known issues in real time 🤔
📋 Description
Follow up from #9542
We make extensive use of GitHub actions and workflows. They're a huge productivity boost.
Simultaneously, there are some foot guns and security considerations. #9542 highlights one of these.
This was an issue I was previously aware of
shields/.github/actions/service-tests/action.yml
Lines 47 to 57 in 1d9a6b0
Can we adopt some automated tooling that would flag issues like this and help us to fall into the pit of success here? One option is https://github.com/rhysd/actionlint I've not tried it out yet but it looks like this would have caught that issue in CI.
Are there other options we should evaluate?
The text was updated successfully, but these errors were encountered: