From 58e9640267361c420a84a3c2343ef85d0a3368f1 Mon Sep 17 00:00:00 2001
From: Tommy Ludwig <8924140+shakuzen@users.noreply.github.com>
Date: Wed, 4 Dec 2024 22:20:36 +0900
Subject: [PATCH] Allow manual runs of the security check (#233)

* Allow manual runs of the security check

So we can check before releasing that the release branch is up-to-date.

* Work around markdown-lint-check issue

Pins the version to the last known version that works with a config file, like we use.
---
 .github/workflows/security.yml | 1 +
 RELEASE.md                     | 2 +-
 build-bin/configure_lint       | 3 ++-
 3 files changed, 4 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/security.yml b/.github/workflows/security.yml
index 511e35a..f640e6b 100644
--- a/.github/workflows/security.yml
+++ b/.github/workflows/security.yml
@@ -3,6 +3,7 @@ name: security
 
 # We don't scan documentation-only commits.
 on:  # yamllint disable-line rule:truthy
+  workflow_dispatch: # trigger ad-hoc runs of this action
   push:  # non-tagged pushes to master
     branches:
       - master
diff --git a/RELEASE.md b/RELEASE.md
index 7b0bb71..95e4d7f 100644
--- a/RELEASE.md
+++ b/RELEASE.md
@@ -6,7 +6,7 @@ This repo uses semantic versions. Please keep this in mind when choosing version
 
    Before you start a release, make sure all dependencies are up-to-date, or are documented why not.
    Pay special attention to the [security workflow](.github/workflows/security.yml), which should
-   run clean.
+   run clean. You can manually run the Action to check the release branch is up-to-date.
 
 1. **Alert others you are releasing**
 
diff --git a/build-bin/configure_lint b/build-bin/configure_lint
index 3d32fd7..9273e52 100755
--- a/build-bin/configure_lint
+++ b/build-bin/configure_lint
@@ -1,7 +1,8 @@
 #!/bin/sh -ue
 
 # Attempt to install markdown-link-check if absent
-markdown-link-check -V || npm install -g markdown-link-check
+# Pinned until https://github.com/tcort/markdown-link-check/issues/369
+markdown-link-check -V || npm install -g markdown-link-check@3.12.2
 
 # Attempt to install yamllint if absent
 yamllint || pip install --user yamllint