Repository navigation
feat: add run-script reusable workflow #14
Workflow file for this run
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: CI | |
| on: | |
| push: | |
| branches: | |
| - main | |
| pull_request: | |
| branches: | |
| - main | |
| permissions: {} | |
| jobs: | |
| Lint: | |
| permissions: | |
| contents: read | |
| uses: ./.github/workflows/run-script.yml | |
| secrets: | |
| STEP_SECURITY_API_KEY: ${{ secrets.STEP_SECURITY_API_KEY }} | |
| with: | |
| pre-commit-cache: true | |
| # zizmor's online audits skip silently without a token, and its summary | |
| # line reads the same either way, so CI would pass while the supply-chain | |
| # audits never ran. | |
| github-token: true | |
| run: | | |
| just lint | |
| Test: | |
| permissions: | |
| contents: read | |
| uses: ./.github/workflows/run-script.yml | |
| secrets: | |
| STEP_SECURITY_API_KEY: ${{ secrets.STEP_SECURITY_API_KEY }} | |
| with: | |
| run: | | |
| just test |