mirror of
https://github.com/Sea-Haven-Industries/shoc-frontend-new.git
synced 2026-09-30 19:43:12 +00:00
69c24c1c2c
* feat(terraform): ship dev content CD through Terraform (SH-300) GitHub uploads immutable release prefixes; Terraform owns live publish. Push-to-dev stays off until TERRAFORM_CONTENT_CD_ENABLED is set. * fix(terraform): align release-plan guard flags and CloudFront verify IAM (SH-300)
50 lines
1.7 KiB
Bash
Executable file
50 lines
1.7 KiB
Bash
Executable file
#!/usr/bin/env bash
|
|
# bash -n every shell script and every workflow `run:` block. actionlint when present.
|
|
set -euo pipefail
|
|
ROOT="$(cd "$(dirname "$0")/.." && pwd)"
|
|
cd "${ROOT}"
|
|
|
|
for script in scripts/*.sh; do
|
|
bash -n "${script}"
|
|
done
|
|
|
|
python3 - "${ROOT}" << 'PY'
|
|
import pathlib, re, subprocess, sys, tempfile
|
|
root = pathlib.Path(sys.argv[1])
|
|
failures = 0
|
|
workflow_count = 0
|
|
block_count = 0
|
|
for workflow in sorted((root / ".github/workflows").glob("*.yml")) + sorted(
|
|
(root / ".github/workflows").glob("*.yaml")
|
|
):
|
|
workflow_count += 1
|
|
text = workflow.read_text(encoding="utf-8")
|
|
blocks = []
|
|
for match in re.finditer(r"^(\s+)run:\s*\|[^\n]*\n((?:\1 .*\n)+)", text, re.M):
|
|
indent = len(match.group(1)) + 2
|
|
body = []
|
|
for line in match.group(2).splitlines():
|
|
body.append(line[indent:] if len(line) >= indent else line.lstrip())
|
|
blocks.append("\n".join(body) + "\n")
|
|
block_count += len(blocks)
|
|
for index, block in enumerate(blocks, start=1):
|
|
with tempfile.NamedTemporaryFile("w", suffix=".sh", delete=False) as handle:
|
|
handle.write(block)
|
|
name = handle.name
|
|
result = subprocess.run(["bash", "-n", name], capture_output=True, text=True)
|
|
pathlib.Path(name).unlink()
|
|
if result.returncode != 0:
|
|
failures += 1
|
|
sys.stderr.write(f"{workflow.relative_to(root)} run block {index}: {result.stderr}")
|
|
if failures:
|
|
raise SystemExit(1)
|
|
print(
|
|
f"bash -n passed for scripts and {block_count} run blocks in {workflow_count} workflows"
|
|
)
|
|
PY
|
|
|
|
if command -v actionlint >/dev/null 2>&1; then
|
|
actionlint -color
|
|
else
|
|
echo "actionlint not installed; skipped (CI installs it)"
|
|
fi
|