actionlint.yaml

# Copyright 2022 Chainguard, Inc.
# SPDX-License-Identifier: Apache-2.0

name: Action Lint

on:
  pull_request:
    branches:
      - 'main'

permissions: {}

jobs:

  action-lint:
    name: Action lint
    runs-on: ubuntu-latest

    permissions:
      contents: read

    steps:
      - name: Harden the runner (Audit all outbound calls)
        uses: step-security/harden-runner@0634a2670c59f64b4a01f0f96f84700a4088b9f0 # v2.12.0
        with:
          egress-policy: audit

      - name: Check out code
        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2

      - name: Find yamls
        id: get_yamls
        run: |
          set -x
          set -e
          mapfile -t yamls < <(find .github/workflows -name "*.y*ml" | grep -v dependabot.)
          echo "files=${yamls[*]}" >> "${GITHUB_OUTPUT}"

      - name: Action lint
        uses: reviewdog/action-actionlint@a5524e1c19e62881d79c1f1b9b6f09f16356e281 # v1.65.2
        with:
          actionlint_flags: ${{ steps.get_yamls.outputs.files }}