feat(j-s): Deliver subpoena revocation to police #66547
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: External checks | |
| on: | |
| pull_request: {} | |
| workflow_dispatch: {} | |
| defaults: | |
| run: | |
| shell: bash | |
| jobs: | |
| codeowners-check: | |
| name: Lint CODEOWNERS | |
| runs-on: ec2-runners | |
| env: | |
| CHECK: 'false' | |
| container: | |
| image: public.ecr.aws/m3u4c4h9/island-is/actions-runner-public:latest | |
| steps: | |
| - uses: actions/checkout@v4 | |
| with: | |
| fetch-depth: 0 | |
| - name: Check if codeowners file changed | |
| run: | | |
| set -euo pipefail | |
| MERGE_BASE="$(git merge-base "${{github.event.pull_request.base.sha}}" "$GITHUB_SHA")" | |
| if ! git diff --exit-code --name-only "$MERGE_BASE".."$GITHUB_SHA" .github/CODEOWNERS; then | |
| echo "CHECK=true" >> "$GITHUB_ENV" | |
| if [[ "${{ github.event.pull_request.head.repo.full_name }}" != "${{ github.repository }}" ]]; then | |
| echo "Changes to codeowners are not allowed on forks!" | |
| exit 1 | |
| fi | |
| fi | |
| - name: Check indentation | |
| if: env.CHECK == 'true' | |
| run: | | |
| set -euo pipefail | |
| no_different_indentations="$(cat .github/CODEOWNERS | grep -v '^#' | awk NF | sed s/@.*//g | awk '{ print length }' | sort | uniq | wc -l)" | |
| if [[ "$no_different_indentations" != "1" ]]; then | |
| echo "CODEOWNERS has $no_different_indentations different indentations." | |
| echo "Make sure that all teams start in the same column." | |
| cat .github/CODEOWNERS | grep -v '^#' | awk NF | |
| exit 1 | |
| fi | |
| - name: Codeowners validation | |
| if: env.CHECK == 'true' | |
| run: | | |
| set -euo pipefail | |
| curl -sfL https://raw.githubusercontent.com/mszostok/codeowners-validator/main/install.sh | sh -s -- -b "$HOME" v0.7.4 | |
| REPOSITORY_PATH="." \ | |
| GITHUB_ACCESS_TOKEN="$GH_TOKEN" \ | |
| EXPERIMENTAL_CHECKS="notowned" \ | |
| CHECKS="files,owners,duppatterns" \ | |
| OWNER_CHECKER_REPOSITORY="island-is/island.is" \ | |
| ~/codeowners-validator | |
| env: | |
| GH_TOKEN: ${{secrets.OWNERS_VALIDATOR_GITHUB_SECRET}} |