[action] bump oxsecurity/megalinter from 7.11.0 to 7.11.1 (#73) #69
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| --- | |
| # Copied from: rasa/dotfiles/.github/workflows/mega-linter.yml | |
| # EDIT THE ABOVE FILE, NOT THIS COPY, OR YOUR CHANGES WILL BE LOST! | |
| # yamllint disable rule:line-length | |
| # $schema https://json.schemastore.org/github-workflow.json | |
| # checkov:skip=CKV_GHA_7:The build output cannot be affected by user parameters | |
| # other than the build entry point and the top-level source location. | |
| # GitHub Actions workflow_dispatch inputs MUST be empty. | |
| name: mega-linter | |
| # Trigger mega-linter at every push. Action will also be visible from Pull | |
| # Requests to main | |
| on: # yamllint disable-line rule:truthy | |
| # Comment this line to trigger action only on pull-requests | |
| # (not recommended if you don't pay for GH Actions) | |
| push: | |
| branches: | |
| - main | |
| - master # @TODO remove | |
| pull_request: | |
| branches: | |
| - main | |
| - master # @TODO remove | |
| # <@rasa> | |
| workflow_call: # Required so this workflow can be called from another workflow | |
| inputs: | |
| # checkov:skip=CKV_GHA_7 | |
| fetch_depth: | |
| # description: "Number of commits to fetch. 0 indicates all history for all branches and tags." | |
| type: string | |
| default: "1" | |
| # checkov:skip=CKV_GHA_7 | |
| validate_all_codebase: | |
| # description: "Validate the entire code base (enter any value)" | |
| type: string | |
| default: "true" | |
| workflow_dispatch: # Allows you to run this workflow manually from the Actions tab | |
| inputs: | |
| # checkov:skip=CKV_GHA_7 | |
| fetch_depth: | |
| description: "Number of commits to fetch. 0 indicates all history for all branches and tags." | |
| type: string | |
| default: "1" | |
| # checkov:skip=CKV_GHA_7 | |
| validate_all_codebase: | |
| description: "Validate the entire code base." | |
| type: choice | |
| options: | |
| - "false" | |
| - "true" | |
| default: "true" | |
| concurrency: | |
| group: ${{ github.workflow }} | |
| cancel-in-progress: true | |
| # </@rasa> | |
| # Comment env block if you do not want to apply fixes | |
| env: | |
| # Apply linter fixes configuration | |
| # | |
| # When active, APPLY_FIXES must also be defined as environment variable | |
| # (in github/workflows/mega-linter.yml or other CI tool) | |
| APPLY_FIXES: all | |
| # Decide which event triggers application of fixes in a commit or a PR | |
| # (pull_request, push, all) | |
| APPLY_FIXES_EVENT: all # was `pull_request` changed by @rasa | |
| # If APPLY_FIXES is used, defines if the fixes are directly committed (commit) | |
| # or posted in a PR (pull_request) | |
| APPLY_FIXES_MODE: commit | |
| jobs: | |
| megalinter: | |
| name: MegaLinter | |
| runs-on: ubuntu-latest | |
| # <@rasa> | |
| # defaults: | |
| # run: | |
| # shell: bash --noprofile --norc -v -x {0} | |
| # </@rasa> | |
| # Give the default GITHUB_TOKEN write permission to commit and push, comment | |
| # issues & post new PR; remove the ones you do not need | |
| permissions: | |
| contents: write | |
| issues: write | |
| pull-requests: write | |
| steps: | |
| # Git Checkout | |
| - name: Checkout Code | |
| uses: actions/[email protected] # was v4, changed by @rasa | |
| with: | |
| token: ${{ secrets.PAT || secrets.GITHUB_TOKEN }} | |
| # If you use VALIDATE_ALL_CODEBASE = true, you can remove this line to | |
| # improve performance | |
| fetch-depth: ${{ inputs.fetch_depth }} # added by @rasa | |
| show-progress: false # added by @rasa | |
| # <@rasa> | |
| - name: output debug vars | |
| run: | | |
| cat <<-EOF | |
| inputs=${{ toJSON(inputs) }} | |
| EOF | |
| # </@rasa> | |
| # MegaLinter | |
| - name: MegaLinter | |
| # You can override MegaLinter flavor used to have faster performances | |
| # More info at https://megalinter.io/flavors/ | |
| uses: oxsecurity/[email protected] # changed from v7 by @rasa | |
| id: ml | |
| # All available variables are described in documentation | |
| # https://megalinter.io/configuration/ | |
| env: | |
| # Validates all source when push on main, else just the git diff with | |
| # main. Override with true if you always want to lint all sources | |
| # | |
| # To validate the entire codebase, set to: | |
| # VALIDATE_ALL_CODEBASE: true | |
| # | |
| # To validate only diff with main, set to: | |
| # VALIDATE_ALL_CODEBASE: >- | |
| # ${{ | |
| # github.event_name == 'push' && | |
| # contains(fromJSON('["refs/heads/main", "refs/heads/master"]'), github.ref) | |
| # }} | |
| VALIDATE_ALL_CODEBASE: >- | |
| ${{ | |
| inputs.validate_all_codebase == 'true' || | |
| github.event_name == 'push' && | |
| contains(fromJSON('["refs/heads/main", "refs/heads/master"]'), github.ref) | |
| }} | |
| GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} | |
| # ADD YOUR CUSTOM ENV VARIABLES HERE OR DEFINE THEM IN A FILE | |
| # .mega-linter.yml AT THE ROOT OF YOUR REPOSITORY | |
| # Uncomment to disable copy-paste and spell checks | |
| # DISABLE: COPYPASTE,SPELL | |
| # Upload MegaLinter artifacts | |
| - name: Archive production artifacts | |
| uses: actions/[email protected] # changed from v3 by @rasa | |
| if: success() || failure() # changed by @rasa: was ${{ success() }} || ${{ failure() }} | |
| with: | |
| name: MegaLinter reports | |
| path: | | |
| megalinter-reports | |
| mega-linter.log | |
| # <@rasa> | |
| - name: Remove production artifacts | |
| continue-on-error: true | |
| run: | | |
| sudo chown -Rc "${UID}" megalinter-reports mega-linter.log || true | |
| sudo chmod a+w megalinter-reports mega-linter.log || true | |
| sudo rm -fr megalinter-reports mega-linter.log || true | |
| # - name: USES crazy-max/[email protected] | |
| # uses: crazy-max/[email protected] | |
| - name: output debug vars | |
| run: | | |
| cat <<-EOF | |
| steps.ml.outputs=${{ toJSON(steps.ml.outputs) }} | |
| EOF | |
| # </@rasa> | |
| # Set APPLY_FIXES_IF var for use in future steps | |
| - name: Set APPLY_FIXES_IF var | |
| run: | | |
| printf 'APPLY_FIXES_IF=%s\n' "${{ | |
| steps.ml.outputs.has_updated_sources == 1 && | |
| ( | |
| env.APPLY_FIXES_EVENT == 'all' || | |
| env.APPLY_FIXES_EVENT == github.event_name | |
| ) && | |
| ( | |
| github.event_name == 'push' || | |
| github.event.pull_request.head.repo.full_name == github.repository | |
| ) | |
| }}" >> "${GITHUB_ENV}" | |
| # Set APPLY_FIXES_IF_* vars for use in future steps | |
| - name: Set APPLY_FIXES_IF_* vars | |
| run: | | |
| printf 'APPLY_FIXES_IF_PR=%s\n' "${{ | |
| env.APPLY_FIXES_IF == 'true' && | |
| env.APPLY_FIXES_MODE == 'pull_request' | |
| }}" >> "${GITHUB_ENV}" | |
| printf 'APPLY_FIXES_IF_COMMIT=%s\n' "${{ | |
| env.APPLY_FIXES_IF == 'true' && | |
| env.APPLY_FIXES_MODE == 'commit' && | |
| (!contains(fromJSON('["refs/heads/main", "refs/heads/master"]'), github.ref)) | |
| }}" >> "${GITHUB_ENV}" | |
| # Create pull request if applicable | |
| # (for now works only on PR from same repository, not from forks) | |
| - name: Create Pull Request with applied fixes | |
| uses: peter-evans/[email protected] # changed from v5 by @rasa | |
| id: cpr | |
| if: env.APPLY_FIXES_IF_PR == 'true' | |
| with: | |
| token: ${{ secrets.PAT || secrets.GITHUB_TOKEN }} | |
| commit-message: "[MegaLinter] Apply linters automatic fixes" | |
| title: "[MegaLinter] Apply linters automatic fixes" | |
| labels: bot | |
| - name: Create PR output | |
| if: env.APPLY_FIXES_IF_PR == 'true' | |
| run: | | |
| echo "PR Number - ${{ steps.cpr.outputs.pull-request-number }}" | |
| echo "PR URL - ${{ steps.cpr.outputs.pull-request-url }}" | |
| # Push new commit if applicable | |
| # (for now works only on PR from same repository, not from forks) | |
| - name: Prepare commit | |
| if: env.APPLY_FIXES_IF_COMMIT == 'true' | |
| run: sudo chown -Rc $UID .git/ | |
| - name: Commit and push applied linter fixes | |
| uses: stefanzweifel/[email protected] # changed from v4 by @rasa | |
| if: env.APPLY_FIXES_IF_COMMIT == 'true' | |
| with: | |
| branch: >- | |
| ${{ | |
| github.event.pull_request.head.ref || | |
| github.head_ref || | |
| github.ref | |
| }} | |
| commit_message: "[MegaLinter] Apply linters fixes" | |
| commit_user_name: megalinter-bot | |
| commit_user_email: [email protected] | |
| # cspell:ignore stefanzweifel | |
| # cSpell:ignore noprofile, norc |