* Add zizmor checks on CI. * Fix zizmor credentials warnings * Add persist-credentials: false to action-cached-lfs-checkout too. * Add empty permissions by default. * Ignore pull_request_target failure and add a warning.
29 lines
707 B
YAML
29 lines
707 B
YAML
name: Danger CI
|
|
|
|
on:
|
|
pull_request:
|
|
types: [ labeled, synchronize, opened, reopened ]
|
|
|
|
permissions: {}
|
|
|
|
jobs:
|
|
build:
|
|
name: Danger
|
|
runs-on: ubuntu-latest
|
|
timeout-minutes: 15
|
|
|
|
concurrency:
|
|
# Only allow a single run of this workflow on each branch, automatically cancelling older runs.
|
|
group: ${{ format('danger-ci-{0}', github.ref) }}
|
|
cancel-in-progress: true
|
|
|
|
steps:
|
|
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
|
|
with:
|
|
persist-credentials: false
|
|
|
|
- name: Danger
|
|
uses: danger/swift@434d7c25f3b02d490a340b23f5e78dd15a5670bc # 3.22.1
|
|
env:
|
|
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
|