d6d4ddb15b
Templates for repos to enable language-specific security scanning: - security-php.yml: PHPStan + Semgrep SAST - security-shell.yml: ShellCheck for bash scripts - security-docker.yml: Hadolint for Dockerfiles CodeQL default setup now enabled across all public repos for: - Go, JavaScript/TypeScript (core, core-gui, build) - JavaScript/TypeScript (core-admin, core-api, core-mcp, etc.) - Actions workflow scanning (core-php, core-tenant, etc.) - Python (ansible-*, docker-server-blockchain) - C# (btcpayserver-docker) Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
24 lines
495 B
YAML
24 lines
495 B
YAML
name: Shell Lint
|
|
|
|
on:
|
|
push:
|
|
branches: [dev, main]
|
|
paths: ['**.sh', '**.bash', 'scripts/**']
|
|
pull_request:
|
|
branches: [dev, main]
|
|
paths: ['**.sh', '**.bash', 'scripts/**']
|
|
workflow_dispatch:
|
|
|
|
jobs:
|
|
shellcheck:
|
|
name: ShellCheck
|
|
runs-on: ubuntu-latest
|
|
steps:
|
|
- uses: actions/checkout@v4
|
|
|
|
- name: Run ShellCheck
|
|
uses: ludeeus/action-shellcheck@master
|
|
with:
|
|
severity: warning
|
|
scandir: '.'
|
|
format: gcc
|