diff options
Diffstat (limited to '.github/workflows')
| -rw-r--r-- | .github/workflows/code-testing.yml | 37 | ||||
| -rw-r--r-- | .github/workflows/secret-scanner.yml | 30 |
2 files changed, 43 insertions, 24 deletions
diff --git a/.github/workflows/code-testing.yml b/.github/workflows/code-testing.yml index 5c06d45..d8b2879 100644 --- a/.github/workflows/code-testing.yml +++ b/.github/workflows/code-testing.yml @@ -59,30 +59,19 @@ jobs: pip install . - name: install dev requirements run: pip install .[dev] - missing-documentation: - name: "Warning documentation is missing" - runs-on: ubuntu-20.04 - needs: [file-changes] - if: needs.file-changes.outputs.cli == 'true' && needs.file-changes.outputs.docs == 'false' - steps: - - name: Documentation is missing - uses: GrantBirki/comment@v2.0.10 - with: - body: | - Please consider that documentation is missing under `docs/` folder. - You should update documentation to reflect your change, or maybe not :) - lint-yaml: - name: Run linting for yaml files - runs-on: ubuntu-20.04 - needs: [file-changes, check-requirements] - if: needs.file-changes.outputs.code == 'true' - steps: - - uses: actions/checkout@v4 - - name: yaml-lint - uses: ibiqlik/action-yamllint@v3 - with: - config_file: .yamllint.yml - file_or_dir: . + # @gmuloc: commenting this out for now + #missing-documentation: + # name: "Warning documentation is missing" + # runs-on: ubuntu-20.04 + # needs: [file-changes] + # if: needs.file-changes.outputs.cli == 'true' && needs.file-changes.outputs.docs == 'false' + # steps: + # - name: Documentation is missing + # uses: GrantBirki/comment@v2.0.10 + # with: + # body: | + # Please consider that documentation is missing under `docs/` folder. + # You should update documentation to reflect your change, or maybe not :) lint-python: name: Check the code style runs-on: ubuntu-20.04 diff --git a/.github/workflows/secret-scanner.yml b/.github/workflows/secret-scanner.yml new file mode 100644 index 0000000..8210953 --- /dev/null +++ b/.github/workflows/secret-scanner.yml @@ -0,0 +1,30 @@ +# Secret-scanner workflow from Arista Networks. +on: + pull_request: + types: [synchronize] + push: + branches: + - main +name: Secret Scanner (go/secret-scanner) +jobs: + scan_secret: + name: Scan incoming changes + runs-on: ubuntu-latest + container: + image: ghcr.io/aristanetworks/secret-scanner-service:main + options: --name sss-scanner + steps: + - name: Checkout ${{ github.ref }} + # Hitting https://github.com/actions/checkout/issues/334 so trying v1 + uses: actions/checkout@v1 + with: + fetch-depth: 0 + - name: Run scanner + run: | + git config --global --add safe.directory $GITHUB_WORKSPACE + scanner commit . github ${{ github.repository }} \ + --markdown-file job_summary.md \ + ${{ github.event_name == 'pull_request' && format('--since-commit {0}', github.event.pull_request.base.sha) || ''}} + - name: Write result to summary + run: cat ./job_summary.md >> $GITHUB_STEP_SUMMARY + if: ${{ always() }} |