Skip to content

ci(precommit): autoupdate #213

ci(precommit): autoupdate

ci(precommit): autoupdate #213

Workflow file for this run

---
name: lint
on:
push:
pull_request:
workflow_dispatch:
permissions: {}
jobs:
build:
runs-on: ubuntu-latest
strategy:
fail-fast: false
max-parallel: 4
env:
ANSIBLE_CALLBACKS_ENABLED: profile_tasks
ANSIBLE_EXTRA_VARS: "-e harden_sshd_remote_src=yes -e harden_testing_privesc_upc=false -e harden_testing_privesc_lpc=false"
ANSIBLE_ROLE: juju4.harden
steps:
- uses: actions/checkout@v4
with:
path: ${{ env.ANSIBLE_ROLE }}
- name: Set up Python
uses: actions/setup-python@v4
with:
python-version: '3.x'
- name: Install dependencies
run: |
python3 -m pip install --upgrade pip
pip3 install ansible-lint flake8 yamllint
which ansible
pip3 install ansible
pip3 show ansible
ls -l $HOME/.local/bin || true
ls -l /opt/hostedtoolcache/Python/3.9.1/x64/bin || true
echo "/opt/hostedtoolcache/Python/3.9.1/x64/bin" >> $GITHUB_PATH
ansible --version
cd $GITHUB_WORKSPACE/$ANSIBLE_ROLE
[ -f molecule/default/requirements.yml ] && ansible-galaxy install -r molecule/default/requirements.yml
[ -f get-dependencies.sh ] && sh -x get-dependencies.sh
{ echo '[defaults]'; echo 'callbacks_enabled = profile_tasks, timer'; echo 'roles_path = ../'; echo 'ansible_python_interpreter: /usr/bin/python3'; } >> ansible.cfg
- name: Fetch central settings repository
run: |
export settings_repo="https://raw.githubusercontent.com/juju4/ansible-ci-settings/main"
cd $GITHUB_WORKSPACE/$ANSIBLE_ROLE
set -x
curl -o requirements.txt "$settings_repo/requirements.txt"
# curl -o .ansible-lint "$settings_repo/.ansible-lint"
curl -o .yamllint "$settings_repo/.yamllint"
pip install -r requirements.txt
continue-on-error: true
- name: Environment
run: |
pwd
env
find . -ls
- uses: codespell-project/actions-codespell@master
with:
ignore_words_file: ${{ env.ANSIBLE_ROLE }}/.codespellignore
skip: .git
path: ${{ env.ANSIBLE_ROLE }}
if: ${{ always() }}
- name: yamllint
run: |
cd $GITHUB_WORKSPACE/$ANSIBLE_ROLE && yamllint .
if: ${{ always() }}
- name: ansible-lint
run: |
cd $GITHUB_WORKSPACE/$ANSIBLE_ROLE && ansible-lint
if: ${{ always() }}