workflows/Taskfile.yml at main · aligent/workflows · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
version: '3'

tasks:
  default:
    desc: Run all CI checks
    deps: [yamllint, actionlint, zizmor]

  yamllint:
    desc: Lint YAML files
    preconditions:
      - sh: command -v yamllint
        msg: "yamllint is not installed. Run: pip3 install yamllint"
    cmds:
      - yamllint .

  actionlint:
    desc: Lint GitHub Actions workflow files
    preconditions:
      - sh: command -v actionlint
        msg: "actionlint is not installed. See https://github.com/rhysd/actionlint/blob/main/docs/install.md"
    cmds:
      - actionlint

  zizmor:
    desc: Run security analysis on GitHub Actions workflows
    preconditions:
      - sh: command -v zizmor
        msg: "zizmor is not installed. Run: pip3 install zizmor"
    cmds:
      - zizmor .github/

  zizmor-fix:
    desc: Auto-fix zizmor security findings (safe fixes only)
    preconditions:
      - sh: command -v zizmor
        msg: "zizmor is not installed. Run: pip3 install zizmor"
    cmds:
      - zizmor --fix .github/