devbase-check/.github/workflows/pull-request-workflow.yml at main · diggsweden/devbase-check · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
# SPDX-FileCopyrightText: 2025 Digg - Agency for Digital Government
#
# SPDX-License-Identifier: CC0-1.0
name: Pull Request Workflow
on: # yamllint disable-line rule:truthy
  pull_request:
permissions:
  contents: read
concurrency:
  group: ${{ github.workflow }}-${{ github.ref }}
  cancel-in-progress: true
jobs:
  pr-checks:
    uses: diggsweden/reusable-ci/.github/workflows/pullrequest-orchestrator.yml@659cc5dbdbedc47f1510817f38aba07de8a93ae8 # v2.6.1
    permissions:
      contents: read
      packages: read
      security-events: write
    secrets: inherit
    with:
      # No buildable artifacts - this is a linting toolkit
      project-type: maven
      # Use just+mise-based linting (replaces commitlint, licenselint, megalint)
      linters.devbasecheck: true
      # Disable deprecated linters (handled by justmiselint)
      linters.commitlint: false
      linters.licenselint: false
      linters.megalint: false
      linters.publiccodelint: false
  test:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
      - uses: jdx/mise-action@6d1e696aa24c1aa1bcc1adea0212707c71ab78a8 # v3.6.1
      - uses: extractions/setup-just@e33e0265a09d6d736e2ee1e0eb685ef1de4669ff # v3
        with:
          just-version: 1.43.0
      - name: Run tests
        run: just test