lint-pr-title-body.yml

# This workflow will do a clean install of node dependencies, build the source code and run tests across different versions of node
# For more information see: https://help.github.com/actions/language-and-framework-guides/using-nodejs-with-github-actions

name: Lint PR Title and Body

on:
  pull_request:
    types:
      - opened
      - edited
      - synchronize

jobs:
  commitlint:
    # This is probably spoofable so only use in lowrisk actions.
    if: ${{ github.event.pull_request.user.login != 'dependabot[bot]' }}
    runs-on: ubuntu-latest

    steps:
      - uses: actions/checkout@v3.5.3
      - name: Use Node.js 16
        uses: actions/setup-node@v3.7.0
        with:
          node-version: '16'
      - run: npm ci
        name: Install needed commitlint config
      - uses: melink14/action-lint-pull-request-title@master
        with:
          include_pr_body: 'true'
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

  # Skip commitlint for dependabot since PR body is not used for final commit
  # An explicitly passing no-op job, like this these PRs to still pass branch protection
  # for this check.
  commitlint_skip:
    name: commitlint
    # This is probably spoofable so only use in lowrisk actions.
    if: ${{ github.pull_request.user.login == 'dependabot[bot]' }}
    runs-on: ubuntu-latest
    steps:
      - run: echo "Skipping commitlint"