Puppet module #37
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
name: Puppet module | |
on: | |
push: | |
paths: | |
- .github/workflows/puppet.yaml | |
- puppet/** | |
pull_request: {} # any target | |
schedule: | |
- cron: '0 0 * * 0' # weekly | |
jobs: | |
prep: | |
name: Download modules | |
runs-on: ubuntu-20.04 | |
steps: | |
- name: Checkout repository | |
uses: actions/checkout@v4 | |
with: | |
submodules: false | |
- name: Install dependencies | |
run: | | |
wget https://apt.puppet.com/puppet-release-focal.deb | |
sudo dpkg -i puppet-release-focal.deb | |
wget https://apt.puppet.com/puppet-tools-release-focal.deb | |
sudo dpkg -i puppet-tools-release-focal.deb | |
sudo apt-get update | |
sudo apt-get install -y puppet-agent puppet-bolt | |
sudo update-alternatives --install /usr/bin/puppet puppet-agent /opt/puppetlabs/bin/puppet 10 | |
sudo chmod +t /tmp # workaround ruby need within prep.sh | |
- name: Prep project | |
run: | | |
./puppet/prep.sh | |
puppet-lint: | |
runs-on: ubuntu-latest | |
permissions: | |
contents: read # for checkout to fetch code | |
security-events: write # for github/codeql-action/upload-sarif to upload SARIF results | |
actions: read # only required for a private repository by github/codeql-action/upload-sarif to get the Action run status | |
steps: | |
- name: Checkout repository | |
uses: actions/checkout@v4 | |
with: | |
submodules: false | |
- name: Setup Ruby | |
uses: ruby/[email protected] | |
with: | |
ruby-version: 2.7 | |
bundler-cache: true | |
- name: Install puppet-lint | |
run: gem install puppet-lint | |
- name: Run puppet-lint | |
run: puppet-lint . --sarif > puppet-lint-results.sarif | |
- name: Upload analysis results to GitHub | |
if: always() | |
uses: github/codeql-action/upload-sarif@v3 | |
with: | |
sarif_file: puppet-lint-results.sarif | |
wait-for-processing: true |