fix: roles-readme action default value (#706)

* fix: default value for push-branch

Signed-off-by: Nemental <[email protected]>

* docs(ssh_hardening): meta arguments desc

Signed-off-by: Nemental <[email protected]>

* fix: split checkout for forked repos in pull requests

Signed-off-by: Nemental <[email protected]>

* fix: push not on pr and added diff

Signed-off-by: Nemental <[email protected]>

---------

Signed-off-by: Nemental <[email protected]>

.github/workflows/roles-readme.yml

@@ -37,11 +37,16 @@ jobs:
       - name: Run aar_doc
         run: aar_doc roles/${{ matrix.roles }} markdown
 
+      - name: Output diff
+        run: git diff roles/${{ matrix.roles }}/README.md
+
       - name: Push README
+        if: github.event_name != 'pull_request'
         uses: github-actions-x/[email protected]
         with:
           github-token: ${{ secrets.GITHUB_TOKEN }}
-          push-branch: ${{ github.head_ref ?? github.ref_name }}
           commit-message: 'update ${{ matrix.roles }} readme'
           files: roles/${{ matrix.roles }}/README.md
           rebase: true
+          name: dev-sec CI
+          email: [email protected]

roles/ssh_hardening/meta/argument_specs.yml

@@ -65,7 +65,7 @@ argument_specs:
       ssh_permit_tunnel:
         default: false
         type: bool
-        description: '`true` if SSH Port Tunneling is required.'
+        description: Set to `true` if SSH Port Tunneling is required.
       ssh_remote_hosts:
         default: []
         type: list