Adds SECURITY.md and scanning workflow #118
Workflow file for this run
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| # yamllint --format github .github/workflows/test.yml | |
| --- | |
| name: test | |
| # We don't test documentation-only commits. | |
| on: | |
| # We run tests on non-tagged pushes to master that aren't a commit made by the release plugin | |
| push: | |
| tags: '' | |
| branches: master | |
| paths-ignore: '**/*.md' | |
| # We also run tests on pull requests targeted at the master branch. | |
| pull_request: | |
| branches: master | |
| paths-ignore: '**/*.md' | |
| jobs: | |
| test: | |
| runs-on: ubuntu-22.04 # newest available distribution, aka jellyfish | |
| steps: | |
| - name: Checkout Repository | |
| uses: actions/checkout@v4 | |
| with: | |
| fetch-depth: 1 # only needed to get the sha label | |
| # We can't cache Docker without using buildx because GH actions restricts /var/lib/docker | |
| # That's ok because DOCKER_PARENT_IMAGE is always ghcr.io and local anyway. | |
| - name: Test | |
| run: build-bin/configure_test && build-bin/test |