Skip to content

Feat: Expose Sonatype scan error handling inputs #2627

Feat: Expose Sonatype scan error handling inputs

Feat: Expose Sonatype scan error handling inputs #2627

Workflow file for this run

---
# SPDX-License-Identifier: Apache-2.0
# SPDX-FileCopyrightText: 2023 The Linux Foundation
name: Lint GitHub Actions workflows
# yamllint disable-line rule:truthy
on: [push, pull_request]
jobs:
actionlint:
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
- name: Download actionlint
id: get_actionlint
# yamllint disable-line rule:line-length
run: bash <(curl https://raw.githubusercontent.com/rhysd/actionlint/main/scripts/download-actionlint.bash)
shell: bash
- name: Check workflow files
run: ${{ steps.get_actionlint.outputs.executable }} -color
shell: bash
semantic-pull-request:
name: Semantic Pull Request
if: github.event_name == 'pull_request'
# Dogfood the shared reusable workflow this repository publishes. It
# tolerates Dependabot's truncated single-commit subjects for long
# dependency names that otherwise trip
# validateSingleCommitMatchesPrTitle.
# yamllint disable-line rule:line-length
uses: ./.github/workflows/reuse-semantic-pull-request.yaml
permissions:
contents: read
# The called workflow's token is capped by the caller; without this the
# gate step's PR API calls fail with 403 on minimal-permission repos.
pull-requests: read
commit-message:
runs-on: ubuntu-latest
if: github.event_name == 'pull_request'
steps:
- name: Checkout code
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
with:
# checkout at the last commit
ref: ${{ github.event.pull_request.head.sha }}
# get all history
fetch-depth: 0
- name: Install gitlint
shell: bash
run: |
python -m pip install gitlint
- name: Run gitlint
shell: bash
run: |
gitlint --commits "${{ github.event.pull_request.base.sha }}..HEAD"