mirror of
https://github.com/NixOS/nixpkgs.git
synced 2025-01-01 10:34:16 +00:00
5bbbc3a30b
In the previous two commits, security issues with these workflows were fixed. In order for these to not be exploitable for PRs to branches that don't have the fixes yet (including read-only branches like nixos-unstable), these workflows are renamed, so that the old ones can be turned off manually via GitHub interface. Co-Authored-By: 13x1 <tori@disroot.org> Co-Authored-By: basti564 <e3e@disroot.org>
45 lines
1.7 KiB
YAML
45 lines
1.7 KiB
YAML
name: "Checking EditorConfig v2"
|
|
|
|
permissions:
|
|
pull-requests: read
|
|
contents: read
|
|
|
|
on:
|
|
# avoids approving first time contributors
|
|
pull_request_target:
|
|
branches-ignore:
|
|
- 'release-**'
|
|
|
|
jobs:
|
|
tests:
|
|
name: editorconfig-check
|
|
runs-on: ubuntu-latest
|
|
if: "github.repository_owner == 'NixOS' && !contains(github.event.pull_request.title, '[skip treewide]')"
|
|
steps:
|
|
- name: Get list of changed files from PR
|
|
env:
|
|
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
|
|
run: |
|
|
gh api \
|
|
repos/NixOS/nixpkgs/pulls/${{github.event.number}}/files --paginate \
|
|
| jq '.[] | select(.status != "removed") | .filename' \
|
|
> "$HOME/changed_files"
|
|
- name: print list of changed files
|
|
run: |
|
|
cat "$HOME/changed_files"
|
|
- uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1
|
|
with:
|
|
# pull_request_target checks out the base branch by default
|
|
ref: refs/pull/${{ github.event.pull_request.number }}/merge
|
|
- uses: cachix/install-nix-action@08dcb3a5e62fa31e2da3d490afc4176ef55ecd72 # v30
|
|
with:
|
|
# nixpkgs commit is pinned so that it doesn't break
|
|
# editorconfig-checker 2.4.0
|
|
nix_path: nixpkgs=https://github.com/NixOS/nixpkgs/archive/c473cc8714710179df205b153f4e9fa007107ff9.tar.gz
|
|
- name: Checking EditorConfig
|
|
run: |
|
|
cat "$HOME/changed_files" | nix-shell -p editorconfig-checker --run 'xargs -r editorconfig-checker -disable-indent-size'
|
|
- if: ${{ failure() }}
|
|
run: |
|
|
echo "::error :: Hey! It looks like your changes don't follow our editorconfig settings. Read https://editorconfig.org/#download to configure your editor so you never see this error again."
|