Skip to content

feat(ci): add actionlint workflow validation job #39

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
iap merged 1 commit into from
Sep 3, 2026
Merged

feat(ci): add actionlint workflow validation job #39

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
16 changes: 16 additions & 0 deletions .github/workflows/ci.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -28,3 +28,19 @@ jobs:
- name: Run tests
run: npm test
if: hashFiles('package.json') != ''

lint-workflows:
runs-on: ubuntu-latest

steps:
- uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0

- name: Download and verify actionlint
run: |
curl -fsSL -o actionlint.tar.gz \
https://github.com/rhysd/actionlint/releases/download/v1.7.12/actionlint_1.7.12_linux_amd64.tar.gz
echo "8aca8db96f1b94770f1b0d72b6dddcb1ebb8123cb3712530b08cc387b349a3d8 actionlint.tar.gz" | sha256sum -c -
tar -xzf actionlint.tar.gz actionlint

- name: Lint GitHub Actions workflows
run: ./actionlint

@greptile-apps greptile-apps Bot Sep 3, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P1 Workflow linter receives no workflow paths

actionlint v1.7.12 does not discover files under .github/workflows when it is invoked without positional paths. As a result, ./actionlint exits successfully without checking any workflow, including when a workflow is invalid. Pass every workflow file explicitly, covering both .yml and .yaml extensions where applicable.

Artifacts

Executed actionlint no-argument reproduction script

  • The repo-local script recreates the pinned download/checksum/extraction flow and compares no-argument behavior with explicit workflow paths; the takeaway is that it deterministically tests the CI command's silent-skip condition.

Executed actionlint no-argument reproduction output

  • Captured output records checksum success and `noarg_with_invalid_workflow=0 explicit_invalid_workflow=1 noarg_pr_ci=0 explicit_pr_ci=0`; the takeaway is that `./actionlint` silently skips workflow validation.

View artifacts

T-Rex Ran code and verified through T-Rex

Fix in Cursor

Loading