ci: add local script to run super-linter

Signed-off-by: Shingo OKAWA <[email protected]>

Author: ognis1205

.github/actions/spelling/allow.txt

@@ -211,6 +211,7 @@ genproto
 georoute
 gettask
 gettickets
+gitleaks
 gitvote
 gle
 googleai

.github/super-linter.env

@@ -0,0 +1,22 @@
+SHELLCHECK_OPTS=-e SC1091 -e SC2086
+VALIDATE_ALL_CODEBASE=false
+FILTER_REGEX_EXCLUDE=^(\\.github/|\\.vscode/).*|CODE_OF_CONDUCT.md|CHANGELOG.md|GOVERNANCE.md|MAINTAINERS.md
+VALIDATE_BASH=true
+VALIDATE_BASH_EXEC=true
+VALIDATE_CSS=true
+VALIDATE_EDITORCONFIG=true
+VALIDATE_GIT_MERGE_CONFLICT_MARKERS=true
+VALIDATE_GITHUB_ACTIONS=true
+VALIDATE_GITLEAKS=true
+VALIDATE_JSCPD=true
+VALIDATE_JSON=true
+VALIDATE_MARKDOWN=true
+VALIDATE_PROTOBUF=true
+VALIDATE_PYTHON_RUFF=true
+VALIDATE_SHELL_SHFMT=true
+VALIDATE_TOML=true
+VALIDATE_TYPESCRIPT_ES=true
+VALIDATE_YAML=true
+TYPESCRIPT_ES_CONFIG_FILE=.eslintrc.js
+MARKDOWN_CONFIG_FILE=.markdownlint.json
+PROTOBUF_CONFIG_FILE=.protolint.yaml

.github/workflows/linter.yaml

@@ -19,29 +19,11 @@ jobs:
         with:
           fetch-depth: 0
 
+      - name: Load Super Linter Environment Variables into GITHUB_ENV
+        run: |
+          grep -v '^\\(#.*\\|\\s\\?\\)$' .github/super-linter.env >> "${GITHUB_ENV}"
+
       - name: GitHub Super Linter
         uses: super-linter/super-linter/slim@v8
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-          SHELLCHECK_OPTS: -e SC1091 -e 2086
-          VALIDATE_ALL_CODEBASE: false
-          FILTER_REGEX_EXCLUDE: "^(\\.github/|\\.vscode/).*|CODE_OF_CONDUCT.md|CHANGELOG.md|GOVERNANCE.md|MAINTAINERS.md"
-          VALIDATE_BASH: true
-          VALIDATE_BASH_EXEC: true
-          VALIDATE_CSS: true
-          VALIDATE_EDITORCONFIG: true
-          VALIDATE_GIT_MERGE_CONFLICT_MARKERS: true
-          VALIDATE_GITHUB_ACTIONS: true
-          VALIDATE_GITLEAKS: true
-          VALIDATE_JSCPD: true
-          VALIDATE_JSON: true
-          VALIDATE_MARKDOWN: true
-          VALIDATE_PROTOBUF: true
-          VALIDATE_PYTHON_RUFF: true
-          VALIDATE_SHELL_SHFMT: true
-          VALIDATE_TOML: true
-          VALIDATE_TYPESCRIPT_ES: true
-          VALIDATE_YAML: true
-          TYPESCRIPT_ES_CONFIG_FILE: ".eslintrc.js"
-          MARKDOWN_CONFIG_FILE: ".markdownlint.json"
-          PROTOBUF_CONFIG_FILE: ".protolint.yaml"

scripts/lint.sh

@@ -0,0 +1,25 @@
+#!/bin/bash
+
+# Exit on error (-e), undefined variable usage (-u), or failed pipe command (-o pipefail).
+set -euo pipefail
+
+# Determine the repository root directory based on the script's location.
+SCRIPT_DIR=$(cd -- "$(dirname -- "${BASH_SOURCE[0]}")" &>/dev/null && pwd)
+REPO_ROOT=$(cd -- "${SCRIPT_DIR}/.." &>/dev/null && pwd)
+# Absolute path to the Super Linter configuration file.
+SUPER_LINTER_ENV="${REPO_ROOT}/.github/super-linter.env"
+# Detect the default branch from the remote repository.
+DEFAULT_BRANCH=$(git remote show origin | grep 'HEAD branch' | cut -d' ' -f5)
+
+# Run Super Linter locally using Docker.
+# This mirrors the configuration used in GitHub Actions to provide consistent linting behavior.
+docker run \
+  --rm -t \
+  --platform linux/x86_64 \
+  -v "${REPO_ROOT}":/tmp/lint \
+  -e SHELL=/bin/bash \
+  -e DEFAULT_BRANCH="${DEFAULT_BRANCH}" \
+  -e RUN_LOCAL=true \
+  -e LOG_LEVEL=INFO \
+  --env-file "${SUPER_LINTER_ENV}" \
+  ghcr.io/super-linter/super-linter:slim-v8