mirror of https://github.com/ivuorinen/actions.git synced 2026-01-26 03:23:59 +00:00

Files

Ismo Vuorinen 9aa16a8164 feat: use our own actions in our workflows (#377 )

* feat: use our own actions in our workflows

* fix: add missing inputs to validate-inputs, refactor node

* chore: cr comment fixes

* fix: update-validators formatting

* chore: update validators, add tests, conventions

* feat: validate severity with severity_enum

* feat: add 10 generic validators to improve input validation coverage

Add comprehensive validation system improvements across multiple phases:

Phase 2A - Quick Wins:
- Add multi_value_enum validator for 2-10 value enumerations
- Add exit_code_list validator for Unix/Linux exit codes (0-255)
- Refactor coverage_driver to use multi_value_enum

Phase 2B - High-Value Validators:
- Add key_value_list validator with shell injection prevention
- Add path_list validator with path traversal and glob support

Quick Wins - Additional Enums:
- Add network_mode validator for Docker network modes
- Add language_enum validator for language detection
- Add framework_mode validator for PHP framework modes
- Update boolean pattern to include 'push'

Phase 2C - Specialized Validators:
- Add json_format validator for JSON syntax validation
- Add cache_config validator for Docker BuildKit cache configs

Improvements:
- All validators include comprehensive security checks
- Pattern-based validation with clear error messages
- 23 new test methods with edge case coverage
- Update special case mappings for 20+ inputs
- Fix build-args mapping test expectation

Coverage impact: 22 actions now at 100% validation (88% → 92%)
Test suite: 762 → 785 tests (+23 tests, all passing)

* chore: regenerate rules.yml with improved validator coverage

Regenerate validation rules for all actions with new validators:

- compress-images: 86% → 100% (+1 input: ignore-paths)
- docker-build: 63% → 100% (+4 inputs: cache configs, platform-build-args)
- docker-publish: 73% → 100% (+1 input: build-args)
- language-version-detect: 67% → 100% (+1 input: language)
- php-tests: 89% (fixed framework→framework_mode mapping)
- prettier-lint: 86% → 100% (+2 inputs: file-pattern, plugins)
- security-scan: 86% (maintained coverage)

Overall: 23 of 25 actions now at 100% validation coverage (92%)

* fix: address PR #377 review comments

- Add | None type annotations to 6 optional parameters (PEP 604)
- Standardize injection pattern: remove @# from comma_separated_list validator
  (@ and # are not shell injection vectors, allows npm scoped packages)
- Remove dead code: unused value expression in key_value_list validator
- Update tests to reflect injection pattern changes

2025-11-25 23:51:03 +02:00

action.yml

chore: update workflows (#375 )

2025-11-25 13:31:36 +02:00

CustomValidator.py

feat: fixes, tweaks, new actions, linting (#186 )

2025-10-14 13:37:58 +03:00

README.md

chore: add tests, update docs and actions (#299 )

2025-10-18 13:09:19 +03:00

rules.yml

feat: use our own actions in our workflows (#377 )

2025-11-25 23:51:03 +02:00

README.md

ivuorinen/actions/go-lint

Go Lint Check

Description

Run golangci-lint with advanced configuration, caching, and reporting

Inputs

name	description	required	default
`working-directory`	Directory containing Go files	`false`	`.`
`golangci-lint-version`	Version of golangci-lint to use	`false`	`latest`
`go-version`	Go version to use	`false`	`stable`
`config-file`	Path to golangci-lint config file	`false`	`.golangci.yml`
`timeout`	Timeout for analysis (e.g., 5m, 1h)	`false`	`5m`
`cache`	Enable golangci-lint caching	`false`	`true`
`fail-on-error`	Fail workflow if issues are found	`false`	`true`
`report-format`	Output format (json, sarif, github-actions)	`false`	`sarif`
`max-retries`	Maximum number of retry attempts	`false`	`3`
`only-new-issues`	Report only new issues since main branch	`false`	`true`
`disable-all`	Disable all linters (useful with --enable-*)	`false`	`false`
`enable-linters`	Comma-separated list of linters to enable	`false`	`""`
`disable-linters`	Comma-separated list of linters to disable	`false`	`""`
`token`	GitHub token for authentication	`false`	`""`

Outputs

name	description
`error-count`	Number of errors found
`sarif-file`	Path to SARIF report file
`cache-hit`	Indicates if there was a cache hit
`analyzed-files`	Number of files analyzed

Runs

This action is a composite action.

Usage

- uses: ivuorinen/actions/go-lint@main
  with:
    working-directory:
    # Directory containing Go files
    #
    # Required: false
    # Default: .

    golangci-lint-version:
    # Version of golangci-lint to use
    #
    # Required: false
    # Default: latest

    go-version:
    # Go version to use
    #
    # Required: false
    # Default: stable

    config-file:
    # Path to golangci-lint config file
    #
    # Required: false
    # Default: .golangci.yml

    timeout:
    # Timeout for analysis (e.g., 5m, 1h)
    #
    # Required: false
    # Default: 5m

    cache:
    # Enable golangci-lint caching
    #
    # Required: false
    # Default: true

    fail-on-error:
    # Fail workflow if issues are found
    #
    # Required: false
    # Default: true

    report-format:
    # Output format (json, sarif, github-actions)
    #
    # Required: false
    # Default: sarif

    max-retries:
    # Maximum number of retry attempts
    #
    # Required: false
    # Default: 3

    only-new-issues:
    # Report only new issues since main branch
    #
    # Required: false
    # Default: true

    disable-all:
    # Disable all linters (useful with --enable-*)
    #
    # Required: false
    # Default: false

    enable-linters:
    # Comma-separated list of linters to enable
    #
    # Required: false
    # Default: ""

    disable-linters:
    # Comma-separated list of linters to disable
    #
    # Required: false
    # Default: ""

    token:
    # GitHub token for authentication
    #
    # Required: false
    # Default: ""