Skip to content

ci: actionlint + shellcheck self-validation - #2

Merged
bgorzelic merged 1 commit into
mainfrom
ci/self-check
Jul 31, 2026
Merged

ci: actionlint + shellcheck self-validation#2
bgorzelic merged 1 commit into
mainfrom
ci/self-check

Conversation

@bgorzelic

Copy link
Copy Markdown
Owner

What

Adds .github/workflows/ci.yml so the repo validates its own templates — a repo that ships release workflows should lint them.

Two jobs, both verified locally before pushing:

  • actionlint (v1.7.12, pinned, via rhysd's download script): lints all templates in workflows/ plus the repo's own .github/workflows/. shellcheck:SC2016 is ignored with a comment explaining why: the social-post steps embed JavaScript via node -e '...', where ${...} is a JS template literal — the single quotes are intentional, so the info-level warning is a false positive, not a suppressed bug. No other rules are ignored.
  • shellcheck: runs the runner's preinstalled shellcheck against scripts/*.sh (onboard-project.sh, setup-secrets.sh). Passes clean with zero exclusions.

How to test

actionlint -ignore 'SC2016:' workflows/*.yml .github/workflows/*.yml
shellcheck scripts/*.sh

Both exit 0 locally (actionlint 1.7.12, shellcheck via Homebrew).

Note: LICENSE (MIT, 2026 Brian Gorzelic) already exists on main — no license change needed or included.

@bgorzelic
bgorzelic merged commit da274f3 into main Jul 31, 2026
2 checks passed
@bgorzelic
bgorzelic deleted the ci/self-check branch July 31, 2026 16:55
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant