Add lint workflow (#28)

* Add lint workflow

* Remove unnecessary checkout and id

* Remove node-version and add .nvmrc

* Update lockfile

* Update changelog

Author: Mrtenz

.github/workflows/build-lint-test.yml

@@ -0,0 +1,40 @@
+name: Build, Lint, and Test
+
+on:
+  workflow_call:
+
+jobs:
+  prepare:
+    name: Prepare
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout and setup environment
+        uses: MetaMask/action-checkout-and-setup@v1
+        with:
+          is-high-risk-environment: false
+          cache-node-modules: true
+
+  lint:
+    name: Lint
+    needs: prepare
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout and setup environment
+        uses: MetaMask/action-checkout-and-setup@v1
+        with:
+          is-high-risk-environment: false
+          cache-node-modules: true
+      - run: yarn lint
+      - name: Validate RC changelog
+        if: ${{ startsWith(github.head_ref, 'release/') }}
+        run: yarn lint:changelog --rc
+      - name: Validate changelog
+        if: ${{ !startsWith(github.head_ref, 'release/') }}
+        run: yarn lint:changelog
+      - name: Require clean working directory
+        shell: bash
+        run: |
+          if ! git diff --exit-code; then
+            echo "Working tree dirty at end of job"
+            exit 1
+          fi

.github/workflows/main.yml

@@ -19,11 +19,17 @@ jobs:
         run: ${{ steps.download-actionlint.outputs.executable }} -color
         shell: bash
 
+  build-lint-test:
+    name: Build, lint, and test
+    uses: ./.github/workflows/build-lint-test.yml
+    needs: check-workflows
+
   all-jobs-completed:
     name: All jobs completed
     runs-on: ubuntu-latest
     needs:
       - check-workflows
+      - build-lint-test
     outputs:
       PASSED: ${{ steps.set-output.outputs.PASSED }}
     steps:

.nvmrc

@@ -0,0 +1 @@
+20

CHANGELOG.md

@@ -7,4 +7,4 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
-[Unreleased]: https://github.com/MetaMask/security-code-scanner/
+[Unreleased]: https://github.com/MetaMask/action-security-code-scanner/

yarn.lock

@@ -221,6 +221,23 @@ __metadata:
   languageName: node
   linkType: hard
 
+"@metamask/action-security-code-scanner@workspace:.":
+  version: 0.0.0-use.local
+  resolution: "@metamask/action-security-code-scanner@workspace:."
+  dependencies:
+    "@actions/core": "npm:^1.10.1"
+    "@actions/github": "npm:^6.0.0"
+    "@lavamoat/allow-scripts": "npm:^3.3.1"
+    "@lavamoat/preinstall-always-fail": "npm:^2.1.0"
+    "@metamask/auto-changelog": "npm:^4.1.0"
+    depcheck: "npm:^1.4.7"
+    mixpanel: "npm:^0.18.0"
+    prettier: "npm:^3.5.3"
+    prettier-plugin-packagejson: "npm:^2.5.10"
+    prettier-plugin-sh: "npm:^0.15.0"
+  languageName: unknown
+  linkType: soft
+
 "@metamask/auto-changelog@npm:^4.1.0":
   version: 4.1.0
   resolution: "@metamask/auto-changelog@npm:4.1.0"
@@ -2087,23 +2104,6 @@ __metadata:
   languageName: node
   linkType: hard
 
-"security-code-scanner@workspace:.":
-  version: 0.0.0-use.local
-  resolution: "security-code-scanner@workspace:."
-  dependencies:
-    "@actions/core": "npm:^1.10.1"
-    "@actions/github": "npm:^6.0.0"
-    "@lavamoat/allow-scripts": "npm:^3.3.1"
-    "@lavamoat/preinstall-always-fail": "npm:^2.1.0"
-    "@metamask/auto-changelog": "npm:^4.1.0"
-    depcheck: "npm:^1.4.7"
-    mixpanel: "npm:^0.18.0"
-    prettier: "npm:^3.5.3"
-    prettier-plugin-packagejson: "npm:^2.5.10"
-    prettier-plugin-sh: "npm:^0.15.0"
-  languageName: unknown
-  linkType: soft
-
 "semver-compare@npm:^1.0.0":
   version: 1.0.0
   resolution: "semver-compare@npm:1.0.0"