mirror of
https://github.com/Sea-Haven-Industries/.github.git
synced 2026-09-30 04:43:12 +00:00
Adam Moussa
2f25ac3535
The org ruleset requires the 'ci / ci' status check on every repo, but this .github repo only houses reusable (workflow_call) workflows and emitted no such check — so every PR sat 'Expected — Waiting for status to be reported' and was unmergeable, including the open Dependabot bumps (#58, #59, #60). Add a workflow that runs actionlint (pinned, checksum-verified) over the workflow files. The ruleset matches the required check against the JOB's check-run name, so the job is named literally 'ci / ci' to emit that exact context (a job named 'ci' emits context 'ci', which the UI only cosmetically shows as 'ci / ci'). shellcheck integration is disabled for now; 4 pre-existing run-step findings are left for a separate cleanup. Pre-existing checkov IAM findings in oidc-deploy-roles.yaml are accepted-risk and suppressed via machine-level security-review config, intentionally NOT committed to this repo. |
||
|---|---|---|
| .. | ||
| ISSUE_TEMPLATE | ||
| workflows | ||
| CODEOWNERS | ||
| dependabot.yml | ||
| PULL_REQUEST_TEMPLATE.md | ||