feat(cra-kit): add cmake mode and embedded srcs-file/no-hash options #21
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: CRA Kit | |
| on: | |
| push: | |
| paths: | |
| - 'cra-kit/**' | |
| - '.github/workflows/cra-kit.yml' | |
| pull_request: | |
| paths: | |
| - 'cra-kit/**' | |
| - '.github/workflows/cra-kit.yml' | |
| # Least-privilege default; this workflow only needs to read the repo contents. | |
| permissions: | |
| contents: read | |
| jobs: | |
| validate-auditor-packet: | |
| runs-on: ubuntu-latest | |
| steps: | |
| # Actions pinned to commit SHAs (supply-chain hygiene), not mutable tags. | |
| - uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1 | |
| - uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 # v5.6.0 | |
| with: | |
| python-version: '3.x' | |
| - name: Validate pinned auditor packet | |
| run: ./cra-kit/scripts/validate.sh | |
| - name: Shell syntax check (sh -n) | |
| run: | | |
| for s in cra-kit/scripts/*.sh; do | |
| echo "sh -n $s" | |
| sh -n "$s" | |
| done | |
| - name: ShellCheck scripts | |
| run: shellcheck cra-kit/scripts/*.sh |