From ac56bfc1136190e45f36ef0e4766132500223e22 Mon Sep 17 00:00:00 2001 From: Kenny Root Date: Tue, 6 Oct 2026 19:45:29 -0700 Subject: [PATCH] chore(ci): add yaml checking workflow --- .../chainguard/cbssh-release-branch.sts.yaml | 1 + .../chainguard/cbssh-release-prepare.sts.yaml | 1 + .../chainguard/cbssh-release-publish.sts.yaml | 1 + .../cbtelnet-release-branch.sts.yaml | 1 + .../cbtelnet-release-prepare.sts.yaml | 1 + .../cbtelnet-release-publish.sts.yaml | 1 + .../termlib-release-branch.sts.yaml | 1 + .../termlib-release-prepare.sts.yaml | 1 + .../termlib-release-publish.sts.yaml | 1 + .github/chainguard/trusted-token-issuers.yaml | 1 + .github/workflows/yaml-lint.yml | 28 +++++++++++++++++++ .yamllint.yaml | 9 ++++++ FUNDING.yml | 1 + 13 files changed, 48 insertions(+) create mode 100644 .github/workflows/yaml-lint.yml create mode 100644 .yamllint.yaml diff --git a/.github/chainguard/cbssh-release-branch.sts.yaml b/.github/chainguard/cbssh-release-branch.sts.yaml index 55d07ec..06643e1 100644 --- a/.github/chainguard/cbssh-release-branch.sts.yaml +++ b/.github/chainguard/cbssh-release-branch.sts.yaml @@ -1,3 +1,4 @@ +# yaml-language-server: $schema=https://raw.githubusercontent.com/octo-sts/app/refs/heads/main/pkg/octosts/octosts.OrgTrustPolicy.json issuer: https://token.actions.githubusercontent.com audience: octo-sts.their.net subject: repo:connectbot/cbssh:ref:refs/heads/main diff --git a/.github/chainguard/cbssh-release-prepare.sts.yaml b/.github/chainguard/cbssh-release-prepare.sts.yaml index 95baba8..35e2697 100644 --- a/.github/chainguard/cbssh-release-prepare.sts.yaml +++ b/.github/chainguard/cbssh-release-prepare.sts.yaml @@ -1,3 +1,4 @@ +# yaml-language-server: $schema=https://raw.githubusercontent.com/octo-sts/app/refs/heads/main/pkg/octosts/octosts.OrgTrustPolicy.json issuer: https://token.actions.githubusercontent.com audience: octo-sts.their.net subject: repo:connectbot/cbssh:ref:refs/heads/main diff --git a/.github/chainguard/cbssh-release-publish.sts.yaml b/.github/chainguard/cbssh-release-publish.sts.yaml index 3a28bc7..5c8c062 100644 --- a/.github/chainguard/cbssh-release-publish.sts.yaml +++ b/.github/chainguard/cbssh-release-publish.sts.yaml @@ -1,3 +1,4 @@ +# yaml-language-server: $schema=https://raw.githubusercontent.com/octo-sts/app/refs/heads/main/pkg/octosts/octosts.OrgTrustPolicy.json issuer: https://token.actions.githubusercontent.com audience: octo-sts.their.net subject: repo:connectbot/cbssh:ref:refs/heads/main diff --git a/.github/chainguard/cbtelnet-release-branch.sts.yaml b/.github/chainguard/cbtelnet-release-branch.sts.yaml index dc38154..5b93e35 100644 --- a/.github/chainguard/cbtelnet-release-branch.sts.yaml +++ b/.github/chainguard/cbtelnet-release-branch.sts.yaml @@ -1,3 +1,4 @@ +# yaml-language-server: $schema=https://raw.githubusercontent.com/octo-sts/app/refs/heads/main/pkg/octosts/octosts.OrgTrustPolicy.json issuer: https://token.actions.githubusercontent.com audience: octo-sts.their.net subject: repo:connectbot/cbtelnet:ref:refs/heads/main diff --git a/.github/chainguard/cbtelnet-release-prepare.sts.yaml b/.github/chainguard/cbtelnet-release-prepare.sts.yaml index a31b5ac..fbb9e39 100644 --- a/.github/chainguard/cbtelnet-release-prepare.sts.yaml +++ b/.github/chainguard/cbtelnet-release-prepare.sts.yaml @@ -1,3 +1,4 @@ +# yaml-language-server: $schema=https://raw.githubusercontent.com/octo-sts/app/refs/heads/main/pkg/octosts/octosts.OrgTrustPolicy.json issuer: https://token.actions.githubusercontent.com audience: octo-sts.their.net subject: repo:connectbot/cbtelnet:ref:refs/heads/main diff --git a/.github/chainguard/cbtelnet-release-publish.sts.yaml b/.github/chainguard/cbtelnet-release-publish.sts.yaml index 2bc54bc..5171481 100644 --- a/.github/chainguard/cbtelnet-release-publish.sts.yaml +++ b/.github/chainguard/cbtelnet-release-publish.sts.yaml @@ -1,3 +1,4 @@ +# yaml-language-server: $schema=https://raw.githubusercontent.com/octo-sts/app/refs/heads/main/pkg/octosts/octosts.OrgTrustPolicy.json issuer: https://token.actions.githubusercontent.com audience: octo-sts.their.net subject: repo:connectbot/cbtelnet:ref:refs/heads/main diff --git a/.github/chainguard/termlib-release-branch.sts.yaml b/.github/chainguard/termlib-release-branch.sts.yaml index 432e061..b8dbbdd 100644 --- a/.github/chainguard/termlib-release-branch.sts.yaml +++ b/.github/chainguard/termlib-release-branch.sts.yaml @@ -1,3 +1,4 @@ +# yaml-language-server: $schema=https://raw.githubusercontent.com/octo-sts/app/refs/heads/main/pkg/octosts/octosts.OrgTrustPolicy.json issuer: https://token.actions.githubusercontent.com audience: octo-sts.their.net subject: repo:connectbot/termlib:ref:refs/heads/main diff --git a/.github/chainguard/termlib-release-prepare.sts.yaml b/.github/chainguard/termlib-release-prepare.sts.yaml index 268d313..b4e6a7c 100644 --- a/.github/chainguard/termlib-release-prepare.sts.yaml +++ b/.github/chainguard/termlib-release-prepare.sts.yaml @@ -1,3 +1,4 @@ +# yaml-language-server: $schema=https://raw.githubusercontent.com/octo-sts/app/refs/heads/main/pkg/octosts/octosts.OrgTrustPolicy.json issuer: https://token.actions.githubusercontent.com audience: octo-sts.their.net subject: repo:connectbot/termlib:ref:refs/heads/main diff --git a/.github/chainguard/termlib-release-publish.sts.yaml b/.github/chainguard/termlib-release-publish.sts.yaml index 6c429ae..6b3dfa7 100644 --- a/.github/chainguard/termlib-release-publish.sts.yaml +++ b/.github/chainguard/termlib-release-publish.sts.yaml @@ -1,3 +1,4 @@ +# yaml-language-server: $schema=https://raw.githubusercontent.com/octo-sts/app/refs/heads/main/pkg/octosts/octosts.OrgTrustPolicy.json issuer: https://token.actions.githubusercontent.com audience: octo-sts.their.net subject: repo:connectbot/termlib:ref:refs/heads/main diff --git a/.github/chainguard/trusted-token-issuers.yaml b/.github/chainguard/trusted-token-issuers.yaml index f26395b..e7eae4a 100644 --- a/.github/chainguard/trusted-token-issuers.yaml +++ b/.github/chainguard/trusted-token-issuers.yaml @@ -1,3 +1,4 @@ +# yaml-language-server: $schema=https://raw.githubusercontent.com/octo-sts/app/refs/heads/main/pkg/octosts/octosts.OrgTrustedIssuers.json mode: enforce issuers: - https://token.actions.githubusercontent.com diff --git a/.github/workflows/yaml-lint.yml b/.github/workflows/yaml-lint.yml new file mode 100644 index 0000000..e90967c --- /dev/null +++ b/.github/workflows/yaml-lint.yml @@ -0,0 +1,28 @@ +# yaml-language-server: $schema=https://www.schemastore.org/github-workflow.json +name: YAML lint + +on: + pull_request: + workflow_dispatch: + +permissions: + contents: read + +jobs: + yaml-lint: + name: YAML format and syntax + runs-on: ubuntu-latest + timeout-minutes: 5 + steps: + - name: Check out repository + uses: actions/checkout@fbc6f3992d24b796d5a048ff273f7fcc4a7b6c09 # v5 + with: + persist-credentials: false + - name: Set up Python + uses: actions/setup-python@ece7cb06caefa5fff74198d8649806c4678c61a1 # v6 + with: + python-version: '3.12' + - name: Install yamllint + run: python -m pip install yamllint==1.38.0 + - name: Check YAML format and syntax + run: yamllint --strict --format github . diff --git a/.yamllint.yaml b/.yamllint.yaml new file mode 100644 index 0000000..ce062b2 --- /dev/null +++ b/.yamllint.yaml @@ -0,0 +1,9 @@ +# yaml-language-server: $schema=https://www.schemastore.org/yamllint.json +extends: default + +rules: + document-start: disable + line-length: + max: 160 + truthy: + check-keys: false diff --git a/FUNDING.yml b/FUNDING.yml index c27c737..2c4df46 100644 --- a/FUNDING.yml +++ b/FUNDING.yml @@ -1,2 +1,3 @@ +# yaml-language-server: $schema=https://www.schemastore.org/github-funding.json github: kruton buy_me_a_coffee: kruton