linter.yml

---
name: Linter
on:
  push:
    branches:
      - '*'
      - '*/*'
      - '**'
    paths-ignore:
      - "services/**"
  pull_request:
    branches:
      - '*'
      - '*/*'
      - '**'
  workflow_dispatch:

jobs:
  lint-actions:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - name: Download actionlint
        id: get_actionlint
        run: bash <(curl https://raw.githubusercontent.com/rhysd/actionlint/main/scripts/download-actionlint.bash)
        shell: bash
      - name: Check workflow files
        run: ${{ steps.get_actionlint.outputs.executable }} -color -ignore 'property ".+" is not defined in object type' -format '{{range $err := .}}::error file={{$err.Filepath}},line={{$err.Line}},col={{$err.Column}}::{{$err.Message}}%0A```%0A{{replace $err.Snippet "\\n" "%0A"}}%0A```\n{{end}}' -ignore 'SC2016:'
        shell: bash

  gitleaks:
    permissions: write-all
    name: gitleaks
    runs-on: ubuntu-latest
    steps:
      - name: checkout-code
        uses: actions/checkout@v4
        with:
          fetch-depth: 0
      - name: run-gitleaks
        uses: gitleaks/gitleaks-action@v2
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

  Lint-yaml:
    name: yamllint
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - name: Install yamllint
        run: pip install yamllint

      - name: run yamllint
        run: yamllint .