Skip to content

[Dependencies]: Bump stefanzweifel/git-auto-commit-action #1175

[Dependencies]: Bump stefanzweifel/git-auto-commit-action

[Dependencies]: Bump stefanzweifel/git-auto-commit-action #1175

Workflow file for this run

--- # Reformatting Yaml
name: "Standardise: YAML format"
on:
push:
branches-ignore:
- "release/*"
- "hotfix/*"
paths:
- '**.yml'
- '**.yaml'
- '.github/workflows/reformat-yaml.yml'
concurrency:
group: ${{github.workflow}}-${{github.ref}}
cancel-in-progress: true
permissions:
contents: write
jobs:
standardise-yaml-files:
if: |-
github.event.pull_request.draft == false
&& ( !startsWith(github.head_ref, 'release/')
&& !startsWith(github.head_ref, 'hotfix/') )
&& github.actor != 'dependabot[bot]'
runs-on: [self-hosted, linux]
steps:
- name: "Initialise Workspace"
if: startsWith(runner.name, 'buildagent-')
shell: bash
run: sudo chown -R "$USER:$USER" "$GITHUB_WORKSPACE"
- name: "Harden Security"
uses: step-security/[email protected]
with:
egress-policy: audit
disable-sudo: true
allowed-endpoints: >
api.github.com:443
api.osv.dev:443
api.securityscorecards.dev:443
codeload.github.com:443
fulcio.sigstore.dev:443
github.com:443
oss-fuzz-build-logs.storage.googleapis.com:443
rekor.sigstore.dev:443
tuf-repo-cdn.sigstore.dev:443
www.bestpractices.dev:443
- name: "Checkout Source"
uses: actions/[email protected]
with:
fetch-depth: 0
fetch-tags: true
token: ${{secrets.SOURCE_PUSH_TOKEN}}
- name: "Reformat"
uses: credfeto/[email protected]
- name: "Commit Changes"
uses: stefanzweifel/[email protected]
with:
commit_message: "[Reformat] YAML Files to common format"
file_pattern: "*.yml"
commit_user_name: "fun-ymlfmt[bot]"
commit_user_email: "[email protected]"
commit_author: "fun-ymlfmt[bot] <[email protected]>"
skip_dirty_check: false