---
# yaml-language-server: https://json.schemastore.org/github-workflow.json
name: reviewdog

on: [push]

concurrency:
  group: ${{ github.workflow }}-${{ github.ref }}
  cancel-in-progress: true

permissions: read-all

jobs:
  linters:
    name: Linters

    runs-on: self-hosted

    permissions: write-all

    steps:
      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4

      - name: GitHub Actions
        uses: reviewdog/action-actionlint@db58217885f9a6570da9c71be4e40ec33fe44a1f # v1
        with:
          github_token: ${{ secrets.GITHUB_TOKEN }}
          reporter: github-pr-review

      - name: detect-secrets
        uses: reviewdog/action-detect-secrets@master
        with:
          github_token: ${{ secrets.GITHUB_TOKEN }}
          reporter: github-pr-review

      - name: markdownlint
        uses: reviewdog/action-markdownlint@f901468edf9a3634dd39b35ba26cad0aad1a0bfd # v0
        with:
          github_token: ${{ secrets.GITHUB_TOKEN }}
          reporter: github-pr-review

      - name: shfmt
        uses: reviewdog/action-shfmt@f59386f08bd9a24ac1a746e69f026ddc2ed06710 # v1
        with:
          github_token: ${{ secrets.GITHUB_TOKEN }}
          shfmt_flags: |
            --find
            --list
            --write
            --diff
            --simplify
            --language-dialect bash
            --indent 2
            --binary-next-line
            --case-indent
            --space-redirects
            --func-next-line