Skip to content

chore(deps): update softprops/action-gh-release digest to 01570a1 #967

chore(deps): update softprops/action-gh-release digest to 01570a1

chore(deps): update softprops/action-gh-release digest to 01570a1 #967

# Copyright 2020 Wayback Archiver. All rights reserved.
# Use of this source code is governed by the MIT license
# that can be found in the LICENSE file.
name: Linter
on:
push:
branches:
- '**'
pull_request:
branches:
- '**'
types: [ opened, synchronize, reopened ]
workflow_call:
inputs:
slim:
type: boolean
default: true
description: 'Whether or not to use Super-Linter Slim image action.'
egress-policy:
type: string
default: 'block'
description: 'Harden-Runner egress traffic policy'
filter-regex-include:
type: string
description: 'Include files or directories with regex patterns int the scan.'
filter-regex-exclude:
type: string
description: 'Exclude files or directories with regex patterns int the scan.'
permissions:
contents: read
packages: read
statuses: write
jobs:
super-linter:
runs-on: ubuntu-latest
permissions:
packages: read
statuses: write
steps:
- name: Harden Runner
uses: step-security/harden-runner@5c7944e73c4c2a096b17a9cb74d65b6c2bbafbde # v2.9.1
with:
disable-sudo: true
egress-policy: ${{ inputs.egress-policy || 'block' }}
disable-telemetry: true
allowed-endpoints: >
github.com:443
api.github.com:443
actions-results-receiver-production.githubapp.com:443
pipelinesghubeus2.actions.githubusercontent.com:443
results-receiver.actions.githubusercontent.com:443
- name: Check out code base
if: github.event_name == 'push'
uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab # v3.5.2
with:
fetch-depth: 0
persist-credentials: false
- name: Check out code base
if: github.event_name == 'pull_request'
uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab # v3.5.2
with:
fetch-depth: 0
persist-credentials: false
ref: ${{ github.event.pull_request.head.sha }}
- name: Lint Code Base
uses: super-linter/super-linter/slim@ff5037c06042e564803502feb97f8a686f3b0171 # v6.0.0
if: ${{ inputs.slim }}
env:
DEFAULT_BRANCH: 'main'
VALIDATE_MARKDOWN: true
VALIDATE_DOCKERFILE: true
VALIDATE_BASH: true
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
FILTER_REGEX_INCLUDE: ${{ inputs.filter-regex-include }}
FILTER_REGEX_EXCLUDE: ${{ inputs.filter-regex-exclude }}
- name: Lint Code Base
uses: super-linter/super-linter@ff5037c06042e564803502feb97f8a686f3b0171 # v6.0.0
if: ${{ inputs.slim == false }}
env:
DEFAULT_BRANCH: 'main'
VALIDATE_MARKDOWN: true
VALIDATE_DOCKERFILE: true
VALIDATE_BASH: true
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}