Nuxt/.github/workflows/introspect.yml
StepSecurity Bot 4a64a64b9e
ci: apply security best practices to workflows (#21328)
Signed-off-by: StepSecurity Bot <bot@stepsecurity.io>
Co-authored-by: Daniel Roe <daniel@roe.dev>
2023-06-02 18:14:21 +01:00

30 lines
684 B
YAML

name: CI
on:
push:
paths:
- ".github/workflows/**"
branches:
- main
pull_request:
paths:
- ".github/workflows/**"
branches:
- main
- "!v[0-9]*"
permissions:
contents: read
jobs:
lint-workflows:
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab # v3.5.2
# From https://github.com/rhysd/actionlint/blob/main/docs/usage.md#use-actionlint-on-github-actions
- name: Check workflow files
run: |
bash <(curl https://raw.githubusercontent.com/rhysd/actionlint/main/scripts/download-actionlint.bash)
./actionlint -color -shellcheck=""