on_pr_lint.yaml

---
name: "On PR Lint"
on:
  pull_request:
    branches:
      - master

jobs:
  check_dependabot:
    runs-on: ubuntu-latest
    steps:
      - name: Checkout source code
        uses: actions/checkout@v4

      - name: Check Changes
        id: changed-env
        uses: tj-actions/changed-files@ed68ef82c095e0d48ec87eccea555d944a631a4c # v46.0.5
        with:
          files: |
            .github/dependabot.yml

      - if: |
          steps.changed-env.outputs.any_modified == 'true'
        run: |
          npx -y @bugron/validate-dependabot-yaml@latest

  lint_cupcake:
    runs-on: ubuntu-latest
    steps:
      - name: Checkout source code
        uses: actions/checkout@v4

      - name: Lint Code Base
        uses: oxsecurity/megalinter/flavors/cupcake@v8.5.0
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}