Moritz
8252b82764
* fix: default value for push-branch Signed-off-by: Nemental <[email protected]> * docs(ssh_hardening): meta arguments desc Signed-off-by: Nemental <[email protected]> * fix: split checkout for forked repos in pull requests Signed-off-by: Nemental <[email protected]> * fix: push not on pr and added diff Signed-off-by: Nemental <[email protected]> --------- Signed-off-by: Nemental <[email protected]>
53 lines
1.2 KiB
YAML
53 lines
1.2 KiB
YAML
---
|
|
name: create roles readme
|
|
|
|
on: # yamllint disable-line rule:truthy
|
|
push:
|
|
branches: [master]
|
|
paths:
|
|
- 'roles/**/meta/argument_specs.yml'
|
|
pull_request:
|
|
branches: [master]
|
|
paths:
|
|
- 'roles/**/meta/argument_specs.yml'
|
|
|
|
jobs:
|
|
readme:
|
|
name: create roles readme
|
|
runs-on: ubuntu-latest
|
|
strategy:
|
|
matrix:
|
|
roles:
|
|
- mysql_hardening
|
|
- nginx_hardening
|
|
- os_hardening
|
|
- ssh_hardening
|
|
steps:
|
|
- name: Check out code
|
|
uses: actions/checkout@v4
|
|
|
|
- name: Set up Python
|
|
uses: actions/setup-python@v4
|
|
with:
|
|
python-version: 3.11
|
|
|
|
- name: Install aar_doc
|
|
run: pip3 install aar_doc
|
|
|
|
- name: Run aar_doc
|
|
run: aar_doc roles/${{ matrix.roles }} markdown
|
|
|
|
- name: Output diff
|
|
run: git diff roles/${{ matrix.roles }}/README.md
|
|
|
|
- name: Push README
|
|
if: github.event_name != 'pull_request'
|
|
uses: github-actions-x/[email protected]
|
|
with:
|
|
github-token: ${{ secrets.GITHUB_TOKEN }}
|
|
commit-message: 'update ${{ matrix.roles }} readme'
|
|
files: roles/${{ matrix.roles }}/README.md
|
|
rebase: true
|
|
name: dev-sec CI
|
|
email: [email protected]
|