Skip to content

SEC-090: Automated trusted workflow pinning (2024-10-21) #133

SEC-090: Automated trusted workflow pinning (2024-10-21)

SEC-090: Automated trusted workflow pinning (2024-10-21) #133

# Continuous integration handling for GitHub Actions workflows
name: ci-github-actions
on:
pull_request:
paths:
- .github/workflows/*.yml
permissions:
contents: read
jobs:
actionlint:
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1
- uses: actions/setup-go@0a12ed9d6a96ab950c8f026ed9f722fe0da7ef32 # v5.0.2
with:
go-version-file: 'go.mod'
- run: go install github.com/rhysd/actionlint/cmd/actionlint@latest
- run: actionlint