mirror of
https://github.com/yamadashy/repomix.git
synced 2026-10-16 00:49:23 +02:00
Fix all findings from actionlint and zizmor security linters:
- Add persist-credentials: false to all checkout steps across 14 workflows
- Fix template injection in repomix action by using env vars instead of ${{ inputs.* }}
- Pin Homebrew actions to SHA (50b8c2ab) instead of @main tag
- Add zizmor config to ignore artipacked for schema-update.yml (needs credentials for push)
- Add zizmor linter job and config path to ci.yml
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
62 lines
1.7 KiB
YAML
62 lines
1.7 KiB
YAML
name: Test Repomix Action
|
|
|
|
on:
|
|
workflow_dispatch:
|
|
push:
|
|
paths:
|
|
- '.github/actions/repomix/**'
|
|
|
|
permissions:
|
|
contents: read
|
|
|
|
jobs:
|
|
test-action:
|
|
name: Test Node.js ${{ matrix.node-version }}
|
|
runs-on: ubuntu-latest
|
|
strategy:
|
|
matrix:
|
|
node-version: [18, 20, 22]
|
|
include:
|
|
- node-version: 18
|
|
test-case: "minimal"
|
|
- node-version: 20
|
|
test-case: "basic"
|
|
- node-version: 22
|
|
test-case: "full"
|
|
steps:
|
|
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
|
|
with:
|
|
persist-credentials: false
|
|
|
|
- name: Run Repomix Action (Minimal)
|
|
if: matrix['test-case'] == 'minimal'
|
|
uses: ./.github/actions/repomix
|
|
with:
|
|
output: "repomix-minimal-output.txt"
|
|
|
|
- name: Run Repomix Action (Basic)
|
|
if: matrix['test-case'] == 'basic'
|
|
uses: ./.github/actions/repomix
|
|
with:
|
|
directories: "src"
|
|
include: "**/*.ts"
|
|
output: "repomix-basic-output.txt"
|
|
compress: "true"
|
|
|
|
- name: Run Repomix Action (Full)
|
|
if: matrix['test-case'] == 'full'
|
|
uses: ./.github/actions/repomix
|
|
with:
|
|
directories: "src tests"
|
|
include: "**/*.ts,**/*.md"
|
|
ignore: "**/*.test.ts"
|
|
output: "repomix-full-output.txt"
|
|
compress: "true"
|
|
additional-args: "--no-file-summary"
|
|
|
|
- name: Upload result
|
|
uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0
|
|
with:
|
|
name: repomix-output-node${{ matrix.node-version }}
|
|
path: repomix-*-output.txt
|