diff --git a/.github/workflows/actions-lint.yml b/.github/workflows/actions-lint.yml new file mode 100644 index 0000000..0c354d4 --- /dev/null +++ b/.github/workflows/actions-lint.yml @@ -0,0 +1,27 @@ +name: Actions Lint + +on: + workflow_call: + +permissions: + contents: read + actions: read + +jobs: + lint: + name: Lint Workflow Files + runs-on: ubuntu-latest + steps: + - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4 + with: + persist-credentials: false + + - name: Run actionlint + uses: docker://rhysd/actionlint:1.7.12 + with: + args: -color + + - name: Run zizmor + uses: zizmorcore/zizmor-action@71321a20a9ded102f6e9ce5718a2fcec2c4f70d8 # v0.5.2 + with: + advanced-security: false diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml new file mode 100644 index 0000000..3f7900d --- /dev/null +++ b/.github/workflows/ci.yml @@ -0,0 +1,17 @@ +name: CI + +on: + push: + branches: [main] + paths: ['.github/workflows/**'] + pull_request: + branches: [main] + paths: ['.github/workflows/**'] + +permissions: + contents: read + actions: read + +jobs: + actions-lint: + uses: ./.github/workflows/actions-lint.yml diff --git a/README.md b/README.md index 5a86cfe..be54a1c 100644 --- a/README.md +++ b/README.md @@ -1 +1,32 @@ # .github + +yellston-com organization の共有設定・Reusable Workflows を管理するリポジトリです。 + +## Reusable Workflows + +### Actions Lint + +[actionlint](https://github.com/rhysd/actionlint) と [zizmor](https://github.com/zizmorcore/zizmor) でワークフローファイルを lint します。 + +> [!TIP] +> zizmor の unpinned-uses 警告を回避するには `@main` をコミットハッシュに置き換えてください。 + +```yaml +name: Actions Lint + +on: + push: + branches: [main] + paths: ['.github/workflows/**'] + pull_request: + branches: [main] + paths: ['.github/workflows/**'] + +permissions: + contents: read + actions: read + +jobs: + lint: + uses: yellston-com/.github/.github/workflows/actions-lint.yml@main +```