fix: security-trends fixes, docs, tweaks

This commit is contained in:
Ismo Vuorinen
2025-02-04 12:16:16 +02:00
parent a23c43af8d
commit a006d699d3
11 changed files with 236 additions and 94 deletions

75
run.sh
View File

@@ -1,5 +1,29 @@
#!/usr/bin/env bash
# Error handling
set -euo pipefail
# Log file
log_file="update_$(date +%Y%m%d_%H%M%S).log"
exec 1> >(tee -a "$log_file") 2>&1
# Error handling function
handle_error() {
echo "❌ Error on line $1" | tee -a "$log_file"
exit 1
}
trap 'handle_error $LINENO' ERR
echo "🚀 Aloitetaan päivitys $(date)"
# Check required tools
for cmd in npx sed find grep; do
if ! command -v $cmd &> /dev/null; then
echo "❌ Error: $cmd not found" | tee -a "$log_file"
exit 1
fi
done
# Check if the OS is macOS or Linux
if [[ $OSTYPE == "darwin"* ]]; then
# macOS needs -i .bak because it doesn't support -i without arguments
@@ -9,12 +33,15 @@ else
SED_CMD="sed -i"
fi
# Iterate over directories
echo "📂 Iterating over directories..."
find . -mindepth 1 -maxdepth 1 -type d | while read -r dir; do
dir=${dir#./}
action="./$dir/action.yml"
# if action doesn't exist, skip
if [ ! -f "$action" ]; then
echo "⏩ Skipping $dir - action.yml missing"
continue
fi
@@ -25,40 +52,58 @@ find . -mindepth 1 -maxdepth 1 -type d | while read -r dir; do
# if version doesn't exist, use 'main'
if [ -z "$version" ]; then
version="main"
echo " Version not set in $dir/action.yml, using 'main'"
fi
echo "Updating $readme..."
echo "📝 Updating $readme..."
printf "# %s\n\n" "$repo" >"$readme"
echo "- Generating action documentation..."
npx --yes action-docs@latest \
echo "📄 Generating action documentation..."
if ! npx --yes action-docs@latest \
--source="$action" \
--no-banner \
--include-name-header >>"$readme"
--include-name-header >>"$readme"; then
echo "⚠️ Warning: action-docs failed in $dir directory" | tee -a "$log_file"
fi
echo "- Replacing placeholders in $readme..."
echo "🔄 Replacing placeholders in $readme..."
$SED_CMD "s|PROJECT|$repo|g; s|VERSION|$version|g; s|\*\*\*||g" "$readme"
if [ -f "$readme.bak" ]; then
rm "$readme.bak"
echo "- Removed $readme.bak"
echo "🗑️ Removed $readme.bak"
fi
done
echo ""
echo "Running markdownlint..."
npx --yes markdownlint-cli --fix \
--ignore "**/node_modules/**" "**/README.md"
echo "🔍 Running markdownlint..."
if ! npx --yes markdownlint-cli --fix \
--ignore "**/node_modules/**" "**/README.md"; then
echo "⚠️ Warning: markdownlint found issues" | tee -a "$log_file"
fi
echo ""
echo "Running prettier..."
npx --yes prettier --write \
"run.sh", "**/README.md" "**/action.yml" ".github/workflows/*.yml"
echo "Running prettier..."
if ! npx --yes prettier --write \
"run.sh" "**/README.md" "**/action.yml" ".github/workflows/*.yml"; then
echo "⚠️ Warning: prettier formatting failed" | tee -a "$log_file"
fi
echo ""
echo "Running MegaLinter..."
npx --yes mega-linter-runner
echo "🔎 Running MegaLinter..."
if ! npx --yes mega-linter-runner; then
echo "⚠️ Warning: MegaLinter found issues" | tee -a "$log_file"
fi
echo ""
echo "Done!"
# Summary report
echo "📊 Summary $(date):"
echo "- Log file: $log_file"
if [ -f "$log_file" ]; then
warnings=$(grep -c "⚠️ Warning" "$log_file" || true)
echo "- Warnings: $warnings"
fi
echo "- Status: ✅ Ready"
echo "✅ Ready!"