Files
gh-action-readme/testdata/composite-action/action.yml
Ismo Vuorinen ce02d36929 feat: add comprehensive security scanning and EditorConfig integration
- Add govulncheck, Snyk, and Trivy vulnerability scanning
- Create security workflow for automated scanning on push/PR/schedule
- Add gitleaks for secrets detection and prevention
- Implement EditorConfig linting with eclint and editorconfig-checker
- Update Makefile with security and formatting targets
- Create SECURITY.md with vulnerability reporting guidelines
- Configure Dependabot for automated dependency updates
- Fix all EditorConfig violations across codebase
- Update Go version to 1.23.10 to address stdlib vulnerabilities
- Add tests for internal/helpers package (80% coverage)
- Remove deprecated functions and migrate to error-returning patterns
- Fix YAML indentation in test fixtures to resolve test failures
2025-08-03 20:12:18 +03:00

54 lines
1.3 KiB
YAML

name: Composite Example Action
description: 'Test Composite Action for gh-action-readme dependency analysis'
inputs:
node-version:
description: Node.js version to use
required: false
default: '20'
working-directory:
description: Working directory
required: false
default: '.'
outputs:
build-result:
description: Build result status
value: ${{ steps.build.outputs.result }}
runs:
using: composite
steps:
- name: Checkout repository
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
with:
fetch-depth: 0
token: ${{ github.token }}
- name: Setup Node.js
uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4
with:
node-version: ${{ inputs.node-version }}
cache: 'npm'
- name: Install dependencies
shell: bash
run: |
cd ${{ inputs.working-directory }}
npm ci
- name: Run tests
shell: bash
run: |
npm test
echo "Tests completed successfully"
env:
NODE_ENV: test
- name: Build project
uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4
id: build
with:
node-version: ${{ inputs.node-version }}
branding:
icon: package
color: blue