forked from rook/rook
harshitasao
fb697fb0f7
The openSSF scorecard report warns that the github actions are not pinned by hash. This PR aims at improving this by pinning the github actions by hash. Signed-off-by: harshitasao <harshitasao@gmail.com>
37 lines
866 B
YAML
37 lines
866 B
YAML
name: ShellCheck
|
|
on:
|
|
push:
|
|
tags:
|
|
- v*
|
|
branches:
|
|
- master
|
|
- release-*
|
|
pull_request:
|
|
branches:
|
|
- master
|
|
- release-*
|
|
|
|
# cancel the in-progress workflow when PR is refreshed.
|
|
concurrency:
|
|
group: ${{ github.workflow }}-${{ github.event_name == 'pull_request' && github.head_ref || github.sha }}
|
|
cancel-in-progress: true
|
|
|
|
permissions:
|
|
contents: read
|
|
|
|
jobs:
|
|
shellcheck:
|
|
name: Shellcheck
|
|
runs-on: ubuntu-latest
|
|
steps:
|
|
- uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
|
|
- name: Run ShellCheck
|
|
uses: ludeeus/action-shellcheck@00b27aa7cb85167568cb48a3838b75f4265f2bca # master
|
|
with:
|
|
severity: warning
|
|
check_together: 'yes'
|
|
disable_matcher: false
|
|
additional_files: build/reset build/sed-in-place
|
|
ignore: olm
|
|
format: gcc
|