fluent-bit/.github/workflows/pr-lint.yaml at master · fluent/fluent-bit · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
name: Lint PRs
on:
  pull_request:
  workflow_dispatch:

permissions:
  contents: read

jobs:
  hadolint-pr:
    runs-on: ubuntu-latest
    name: PR - Hadolint
    permissions:
      contents: read
      pull-requests: write
      checks: write
    steps:
      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
        with:
          persist-credentials: false

      - name: Run hadolint
        uses: reviewdog/action-hadolint@2d0eb7c86a0ddd94eb625485f4cc2730e105edd8 # v1.53.0
        with:
          github_token: ${{ secrets.github_token }}
          fail_level: "warning"
          reporter: github-pr-review # Better annotation in PRs
          exclude: |
            packaging/testing/smoke/packages/Dockerfile.*

  shellcheck-pr:
    runs-on: ubuntu-latest
    name: PR - Shellcheck
    permissions:
      contents: read
      pull-requests: write
      checks: write
    steps:
      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
        with:
          persist-credentials: false

      - name: Run shellcheck
        uses: reviewdog/action-shellcheck@0722bbdb0d47f04c1b53b8734d2422ac63a45ec6 # v1.32.1
        with:
          github_token: ${{ secrets.github_token }}
          fail_level: "warning"
          reporter: github-pr-review # Better annotation in PRs
          exclude: |
            */.git/*
            ./cmake/sanitizers-cmake/**
            ./lib/**
            ./plugins/**
            ./tests/**

  actionlint-pr:
    runs-on: ubuntu-latest
    name: PR - Actionlint
    permissions:
      contents: read
      pull-requests: write
      checks: write
    steps:
      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
        with:
          persist-credentials: false

      - name: Run actionlint
        uses: reviewdog/action-actionlint@d63ba7532e0942965320cd8d73cbae4c7b3c5283 # v1.73.1
        with:
          # Disable shellcheck as done elsewhere and speeds up process
          actionlint_flags: -shellcheck=
          fail_level: "warning"
          reporter: github-pr-review # Better annotation in PRs
          github_token: ${{ secrets.github_token }}