diff options
author | 2023-08-12 19:56:52 -0300 | |
---|---|---|
committer | 2023-08-14 04:32:36 -0300 | |
commit | f3948a895fe027febb4b3aa6c5cd6a4ba0ee5948 (patch) | |
tree | 5ff2a7774eec4657f4a1c585c3a2ca3db57d95b2 /.github | |
parent | build: codespell: remove dependency on "clean" (diff) | |
download | firejail-f3948a895fe027febb4b3aa6c5cd6a4ba0ee5948.tar.gz firejail-f3948a895fe027febb4b3aa6c5cd6a4ba0ee5948.tar.zst firejail-f3948a895fe027febb4b3aa6c5cd6a4ba0ee5948.zip |
ci: move codespell job into its own workflow
Split the spellchecking job from the build-related jobs to make
debugging easier.
Diffstat (limited to '.github')
-rw-r--r-- | .github/workflows/build-extra.yml | 24 | ||||
-rw-r--r-- | .github/workflows/build.yml | 2 | ||||
-rw-r--r-- | .github/workflows/codeql-analysis.yml | 2 | ||||
-rw-r--r-- | .github/workflows/codespell.yml | 38 |
4 files changed, 44 insertions, 22 deletions
diff --git a/.github/workflows/build-extra.yml b/.github/workflows/build-extra.yml index 0f7ddb466..3fc71a299 100644 --- a/.github/workflows/build-extra.yml +++ b/.github/workflows/build-extra.yml | |||
@@ -13,6 +13,7 @@ on: | |||
13 | - .github/pull_request_template.md | 13 | - .github/pull_request_template.md |
14 | - .github/workflows/build.yml | 14 | - .github/workflows/build.yml |
15 | - .github/workflows/codeql-analysis.yml | 15 | - .github/workflows/codeql-analysis.yml |
16 | - .github/workflows/codespell.yml | ||
16 | - .github/workflows/profile-checks.yml | 17 | - .github/workflows/profile-checks.yml |
17 | - .gitignore | 18 | - .gitignore |
18 | - .gitlab-ci.yml | 19 | - .gitlab-ci.yml |
@@ -35,6 +36,7 @@ on: | |||
35 | - .github/pull_request_template.md | 36 | - .github/pull_request_template.md |
36 | - .github/workflows/build.yml | 37 | - .github/workflows/build.yml |
37 | - .github/workflows/codeql-analysis.yml | 38 | - .github/workflows/codeql-analysis.yml |
39 | - .github/workflows/codespell.yml | ||
38 | - .github/workflows/profile-checks.yml | 40 | - .github/workflows/profile-checks.yml |
39 | - .gitignore | 41 | - .gitignore |
40 | - .gitlab-ci.yml | 42 | - .gitlab-ci.yml |
@@ -163,25 +165,3 @@ jobs: | |||
163 | - run: cppcheck --version | 165 | - run: cppcheck --version |
164 | - name: cppcheck | 166 | - name: cppcheck |
165 | run: cppcheck -q --force --error-exitcode=1 --enable=warning,performance . | 167 | run: cppcheck -q --force --error-exitcode=1 --enable=warning,performance . |
166 | codespell: | ||
167 | runs-on: ubuntu-22.04 | ||
168 | steps: | ||
169 | - name: Harden Runner | ||
170 | uses: step-security/harden-runner@8ca2b8b2ece13480cda6dacd3511b49857a23c09 | ||
171 | with: | ||
172 | egress-policy: block | ||
173 | allowed-endpoints: > | ||
174 | archive.ubuntu.com:80 | ||
175 | azure.archive.ubuntu.com:80 | ||
176 | github.com:443 | ||
177 | packages.microsoft.com:443 | ||
178 | ppa.launchpadcontent.net:443 | ||
179 | security.ubuntu.com:80 | ||
180 | - uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 | ||
181 | - name: update package information | ||
182 | run: sudo apt-get update -qy | ||
183 | - name: install dependencies | ||
184 | run: sudo apt-get install -qy codespell | ||
185 | - run: codespell --version | ||
186 | - name: codespell | ||
187 | run: make codespell | ||
diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml index cb2c15759..489ed4335 100644 --- a/.github/workflows/build.yml +++ b/.github/workflows/build.yml | |||
@@ -9,6 +9,7 @@ on: | |||
9 | - .github/pull_request_template.md | 9 | - .github/pull_request_template.md |
10 | - .github/workflows/build-extra.yml | 10 | - .github/workflows/build-extra.yml |
11 | - .github/workflows/codeql-analysis.yml | 11 | - .github/workflows/codeql-analysis.yml |
12 | - .github/workflows/codespell.yml | ||
12 | - .github/workflows/profile-checks.yml | 13 | - .github/workflows/profile-checks.yml |
13 | - .gitignore | 14 | - .gitignore |
14 | - .gitlab-ci.yml | 15 | - .gitlab-ci.yml |
@@ -26,6 +27,7 @@ on: | |||
26 | - .github/pull_request_template.md | 27 | - .github/pull_request_template.md |
27 | - .github/workflows/build-extra.yml | 28 | - .github/workflows/build-extra.yml |
28 | - .github/workflows/codeql-analysis.yml | 29 | - .github/workflows/codeql-analysis.yml |
30 | - .github/workflows/codespell.yml | ||
29 | - .github/workflows/profile-checks.yml | 31 | - .github/workflows/profile-checks.yml |
30 | - .gitignore | 32 | - .gitignore |
31 | - .gitlab-ci.yml | 33 | - .gitlab-ci.yml |
diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml index 0f9c0f740..bbd4e47d5 100644 --- a/.github/workflows/codeql-analysis.yml +++ b/.github/workflows/codeql-analysis.yml | |||
@@ -18,6 +18,7 @@ on: | |||
18 | - .github/pull_request_template.md | 18 | - .github/pull_request_template.md |
19 | - .github/workflows/build-extra.yml | 19 | - .github/workflows/build-extra.yml |
20 | - .github/workflows/build.yml | 20 | - .github/workflows/build.yml |
21 | - .github/workflows/codespell.yml | ||
21 | - .github/workflows/profile-checks.yml | 22 | - .github/workflows/profile-checks.yml |
22 | - .gitignore | 23 | - .gitignore |
23 | - .gitlab-ci.yml | 24 | - .gitlab-ci.yml |
@@ -40,6 +41,7 @@ on: | |||
40 | - .github/pull_request_template.md | 41 | - .github/pull_request_template.md |
41 | - .github/workflows/build-extra.yml | 42 | - .github/workflows/build-extra.yml |
42 | - .github/workflows/build.yml | 43 | - .github/workflows/build.yml |
44 | - .github/workflows/codespell.yml | ||
43 | - .github/workflows/profile-checks.yml | 45 | - .github/workflows/profile-checks.yml |
44 | - .gitignore | 46 | - .gitignore |
45 | - .gitlab-ci.yml | 47 | - .gitlab-ci.yml |
diff --git a/.github/workflows/codespell.yml b/.github/workflows/codespell.yml new file mode 100644 index 000000000..aab0674ec --- /dev/null +++ b/.github/workflows/codespell.yml | |||
@@ -0,0 +1,38 @@ | |||
1 | name: Codespell | ||
2 | |||
3 | on: | ||
4 | push: | ||
5 | paths: | ||
6 | - 'src/**' | ||
7 | - 'test/**' | ||
8 | pull_request: | ||
9 | paths: | ||
10 | - 'src/**' | ||
11 | - 'test/**' | ||
12 | |||
13 | permissions: # added using https://github.com/step-security/secure-workflows | ||
14 | contents: read | ||
15 | |||
16 | jobs: | ||
17 | codespell: | ||
18 | runs-on: ubuntu-22.04 | ||
19 | steps: | ||
20 | - name: Harden Runner | ||
21 | uses: step-security/harden-runner@8ca2b8b2ece13480cda6dacd3511b49857a23c09 | ||
22 | with: | ||
23 | egress-policy: block | ||
24 | allowed-endpoints: > | ||
25 | archive.ubuntu.com:80 | ||
26 | azure.archive.ubuntu.com:80 | ||
27 | github.com:443 | ||
28 | packages.microsoft.com:443 | ||
29 | ppa.launchpadcontent.net:443 | ||
30 | security.ubuntu.com:80 | ||
31 | - uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 | ||
32 | - name: update package information | ||
33 | run: sudo apt-get update -qy | ||
34 | - name: install dependencies | ||
35 | run: sudo apt-get install -qy codespell | ||
36 | - run: codespell --version | ||
37 | - name: codespell | ||
38 | run: make codespell | ||