Install lint tools in CI

Author: silarsis

.github/workflows/ci.yml

@@ -0,0 +1,31 @@
+name: CI
+
+on:
+  push:
+    branches: ["**"]
+  pull_request:
+
+jobs:
+  lint-and-test:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Install lint tools
+        run: ./test/install-tools.sh
+
+      - name: Validate script syntax
+        run: ./test/validate-scripts.sh
+
+      - name: ShellCheck
+        run: shellcheck run.sh start_squid.sh test/detect-proxy.sh test/test-proxy.sh test/validate-scripts.sh
+
+      - name: Hadolint
+        run: hadolint Dockerfile test/Dockerfile
+
+      - name: Build proxy image
+        run: docker build -t docker-proxy .
+
+      - name: Build test image
+        run: docker build -t docker-proxy-test ./test

AGENTS.md

@@ -0,0 +1,10 @@
+# Agent Notes
+
+This file tracks agent updates for the repository.
+
+- Last updated: 2025-09-20
+- Updates:
+  - Added CI workflow, script validation, and lint automation.
+  - Added lint tool installer and updated CI to use it.
+  - Added latest-version installer with apt fallback for lint tools.
+  - Expanded script validation to cover the lint tool installer.

test/install-tools.sh

@@ -0,0 +1,90 @@
+#!/usr/bin/env bash
+
+set -euo pipefail
+
+install_dir=${INSTALL_DIR:-/usr/local/bin}
+
+mkdir -p "$install_dir"
+
+fetch_latest_tag() {
+  local repo="$1"
+  curl -fsSL "https://api.github.com/repos/${repo}/releases/latest" \
+    | awk -F '"' '/"tag_name"/ { print $4; exit }'
+}
+
+install_shellcheck() {
+  local tag
+  local arch
+  local tarball
+  local tmp_dir
+
+  tag=$(fetch_latest_tag "koalaman/shellcheck")
+  if [[ -z "$tag" ]]; then
+    return 1
+  fi
+  arch=$(uname -m)
+  case "$arch" in
+    x86_64) arch="x86_64" ;;
+    aarch64|arm64) arch="aarch64" ;;
+    *)
+      echo "Unsupported architecture for shellcheck: $arch" >&2
+      exit 1
+      ;;
+  esac
+
+  tarball="shellcheck-${tag}.linux.${arch}.tar.xz"
+  tmp_dir=$(mktemp -d)
+  if ! curl -fsSL -o "${tmp_dir}/${tarball}" \
+    "https://github.com/koalaman/shellcheck/releases/download/${tag}/${tarball}"; then
+    rm -rf "$tmp_dir"
+    return 1
+  fi
+  tar -xJf "${tmp_dir}/${tarball}" -C "$tmp_dir"
+  mv "${tmp_dir}/shellcheck-${tag}/shellcheck" "${install_dir}/shellcheck"
+  chmod +x "${install_dir}/shellcheck"
+  rm -rf "$tmp_dir"
+}
+
+install_hadolint() {
+  local tag
+  local arch
+  local os
+  local binary
+
+  tag=$(fetch_latest_tag "hadolint/hadolint")
+  if [[ -z "$tag" ]]; then
+    return 1
+  fi
+  os="Linux"
+  arch=$(uname -m)
+  case "$arch" in
+    x86_64) arch="x86_64" ;;
+    aarch64|arm64) arch="arm64" ;;
+    *)
+      echo "Unsupported architecture for hadolint: $arch" >&2
+      exit 1
+      ;;
+  esac
+
+  binary="hadolint-${os}-${arch}"
+  if ! curl -fsSL -o "${install_dir}/hadolint" \
+    "https://github.com/hadolint/hadolint/releases/download/${tag}/${binary}"; then
+    return 1
+  fi
+  chmod +x "${install_dir}/hadolint"
+}
+
+if ! install_shellcheck; then
+  echo "Falling back to apt for shellcheck" >&2
+  apt-get update
+  apt-get install -y shellcheck
+fi
+
+if ! install_hadolint; then
+  echo "Falling back to apt for hadolint" >&2
+  apt-get update
+  apt-get install -y hadolint
+fi
+
+shellcheck --version
+hadolint --version

test/validate-scripts.sh

@@ -0,0 +1,20 @@
+#!/usr/bin/env bash
+
+set -euo pipefail
+
+scripts=(
+  "run.sh"
+  "start_squid.sh"
+  "test/install-tools.sh"
+  "test/detect-proxy.sh"
+  "test/test-proxy.sh"
+)
+
+for script in "${scripts[@]}"; do
+  if [[ ! -f "$script" ]]; then
+    echo "Missing script: $script" >&2
+    exit 1
+  fi
+  bash -n "$script"
+  echo "Validated bash syntax: $script"
+done