mirror of
https://github.com/kemko/nomad.git
synced 2026-01-01 16:05:42 +03:00
8a87c33594
We're required to pin Docker images for Actions to a specific SHA now and this is tripping scans in the Enterprise repo. Update the actionlint image. Ref: https://go.hashi.co/memo/sec-032
16 lines
514 B
YAML
16 lines
514 B
YAML
# If the repository is public, be sure to change to GitHub hosted runners
|
|
name: Lint GitHub Actions Workflows
|
|
on:
|
|
push:
|
|
paths:
|
|
- '.github/workflows/**'
|
|
permissions:
|
|
contents: read
|
|
jobs:
|
|
actionlint:
|
|
runs-on: ubuntu-22.04
|
|
steps:
|
|
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
|
|
- name: "Check workflow files"
|
|
uses: docker://docker.mirror.hashicorp.services/rhysd/actionlint@sha256:887a259a5a534f3c4f36cb02dca341673c6089431057242cdc931e9f133147e9
|