ceph-csi/.github/workflows/mod-check.yaml

---
name: mod-check
# yamllint disable-line rule:truthy
on:
  pull_request:
    branches:
      - '*'
permissions:
  contents: read

jobs:
  mod-check:
    name: mod-check
    runs-on: ubuntu-latest
    steps:
      # yamllint disable-line rule:line-length
      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683  # v4.2.2
      - name: mod-check
        run: make containerized-test TARGET=mod-check
ci: add github workflows for static checks adding a github workflow to run static checks inside a container. Signed-off-by: Madhu Rajanna <madhupr007@gmail.com> 2020-12-04 05:32:12 +00:00			`---`
			`name: mod-check`
			`# yamllint disable-line rule:truthy`
			`on:`
			`pull_request:`
			`branches:`
			`- '*'`
ci: Set permissions for GitHub actions Restrict the GitHub token permissions only to the required ones; this way, even if the attackers will succeed in compromising your workflow, they won’t be able to do much. - Included permissions for the action. https://github.com/ossf/scorecard/blob/main/docs/checks.md#token-permissions https://docs.github.com/en/actions/using-jobs/assigning-permissions-to-jobs Signed-off-by: naveen <172697+naveensrinivasan@users.noreply.github.com> naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com> 2022-05-01 01:00:30 +00:00			`permissions:`
			`contents: read`

ci: add github workflows for static checks adding a github workflow to run static checks inside a container. Signed-off-by: Madhu Rajanna <madhupr007@gmail.com> 2020-12-04 05:32:12 +00:00			`jobs:`
			`mod-check:`
			`name: mod-check`
			`runs-on: ubuntu-latest`
			`steps:`
ci: Harden GitHub Actions Update GitHub actions to use full length commit ids for third-party actions to reduce security risk in case of vulnerabilities. Signed-off-by: StepSecurity Bot <bot@stepsecurity.io> Co-authored-by: Nikhil-Ladha <nikhilladha1999@gmail.com> 2024-09-18 09:19:02 +00:00			`# yamllint disable-line rule:line-length`
rebase: bump actions/checkout from 4.2.1 to 4.2.2 Bumps [actions/checkout](https://github.com/actions/checkout) from 4.2.1 to 4.2.2. - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](https://github.com/actions/checkout/compare/eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871...11bd71901bbe5b1630ceea73d27597364c9af683) --- updated-dependencies: - dependency-name: actions/checkout dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> 2024-10-28 20:18:00 +00:00			`- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2`
ci: add github workflows for static checks adding a github workflow to run static checks inside a container. Signed-off-by: Madhu Rajanna <madhupr007@gmail.com> 2020-12-04 05:32:12 +00:00			`- name: mod-check`
ci: use `podman` for simple GitHub workflows `podman` is installed by default on the Ubuntu runners. Podman is recommended for developers and contributors, as there are no elevated privileges required to run it. Docker requires extra permissions to build and or run container images, and contributors to Ceph-CSI should not need to spend time working with that (several developers run the `docker` command with `sudo`, which is discouraged). Only the multi-arch Workflows require Docker, for the time being. Signed-off-by: Niels de Vos <ndevos@ibm.com> 2023-08-07 11:30:36 +00:00			`run: make containerized-test TARGET=mod-check`