update ci/cd

.github/workflows/mega-linter.yml

@@ -6,67 +6,109 @@ permissions: read-all
 on:
  push:
  pull_request:
- branches: [master]
+ branches:
+ - master
 
 env:
  APPLY_FIXES: none
  APPLY_FIXES_EVENT: pull_request
  APPLY_FIXES_MODE: commit
+ FILTER_REGEX_EXCLUDE: (mega-linter.yml)
  DISABLE: SPELL
 
 concurrency:
  group: ${{ github.ref }}-${{ github.workflow }}
  cancel-in-progress: true
 
 jobs:
- build:
+ megalinter:
  name: MegaLinter
  runs-on: ubuntu-latest
+
+ permissions:
+ contents: write
+ issues: write
+ pull-requests: write
+
  steps:
  - name: Checkout Code
- uses: actions/checkout@v3
+ uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11
  with:
  token: ${{ secrets.PAT || secrets.GITHUB_TOKEN }}
+ fetch-depth: 0
 
  - name: MegaLinter
+ uses: oxsecurity/megalinter@7e042c726c68415475b05a65a686c612120a1232
  id: ml
- uses: oxsecurity/megalinter@v7
  env:
  VALIDATE_ALL_CODEBASE: true
  GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
 
  - name: Archive production artifacts
- if: ${{ success() }} || ${{ failure() }}
- uses: actions/upload-artifact@v3
+ uses: actions/upload-artifact@c7d193f32edcb7bfad88892161225aeda64e9392
+ if: success() || failure()
  with:
  name: MegaLinter reports
  path: |
  megalinter-reports
  mega-linter.log
 
+ - name: Set APPLY_FIXES_IF var
+ run: |
+ printf 'APPLY_FIXES_IF=%s\n' "${{
+ steps.ml.outputs.has_updated_sources == 1 &&
+ (
+ env.APPLY_FIXES_EVENT == 'all' ||
+ env.APPLY_FIXES_EVENT == github.event_name
+ ) &&
+ (
+ github.event_name == 'push' ||
+ github.event.pull_request.head.repo.full_name == github.repository
+ )
+ }}" >> "${GITHUB_ENV}"
+
+ - name: Set APPLY_FIXES_IF_* vars
+ run: |
+ printf 'APPLY_FIXES_IF_PR=%s\n' "${{
+ env.APPLY_FIXES_IF == 'true' &&
+ env.APPLY_FIXES_MODE == 'pull_request'
+ }}" >> "${GITHUB_ENV}"
+ printf 'APPLY_FIXES_IF_COMMIT=%s\n' "${{
+ env.APPLY_FIXES_IF == 'true' &&
+ env.APPLY_FIXES_MODE == 'commit' &&
+ (!contains(fromJSON('["refs/heads/main", "refs/heads/master"]'), github.ref))
+ }}" >> "${GITHUB_ENV}"
+
  - name: Create Pull Request with applied fixes
+ uses: peter-evans/create-pull-request@153407881ec5c347639a548ade7d8ad1d6740e38
  id: cpr
- if: steps.ml.outputs.has_updated_sources == 1 && (env.APPLY_FIXES_EVENT == 'all' || env.APPLY_FIXES_EVENT == github.event_name) && env.APPLY_FIXES_MODE == 'pull_request' && (github.event_name == 'push' || github.event.pull_request.head.repo.full_name == github.repository)
- uses: peter-evans/create-pull-request@v5
+ if: env.APPLY_FIXES_IF_PR == 'true'
  with:
  token: ${{ secrets.PAT || secrets.GITHUB_TOKEN }}
  commit-message: "[MegaLinter] Apply linters automatic fixes"
  title: "[MegaLinter] Apply linters automatic fixes"
  labels: bot
+
  - name: Create PR output
- if: steps.ml.outputs.has_updated_sources == 1 && (env.APPLY_FIXES_EVENT == 'all' || env.APPLY_FIXES_EVENT == github.event_name) && env.APPLY_FIXES_MODE == 'pull_request' && (github.event_name == 'push' || github.event.pull_request.head.repo.full_name == github.repository)
+ if: env.APPLY_FIXES_IF_PR == 'true'
  run: |
- echo "Pull Request Number - ${{ steps.cpr.outputs.pull-request-number }}"
- echo "Pull Request URL - ${{ steps.cpr.outputs.pull-request-url }}"
+ echo "PR Number - ${{ steps.cpr.outputs.pull-request-number }}"
+ echo "PR URL - ${{ steps.cpr.outputs.pull-request-url }}"
 
  - name: Prepare commit
- if: steps.ml.outputs.has_updated_sources == 1 && (env.APPLY_FIXES_EVENT == 'all' || env.APPLY_FIXES_EVENT == github.event_name) && env.APPLY_FIXES_MODE == 'commit' && github.ref != 'refs/heads/main' && (github.event_name == 'push' || github.event.pull_request.head.repo.full_name == github.repository)
+ if: env.APPLY_FIXES_IF_COMMIT == 'true'
  run: sudo chown -Rc $UID .git/
+
  - name: Commit and push applied linter fixes
- if: steps.ml.outputs.has_updated_sources == 1 && (env.APPLY_FIXES_EVENT == 'all' || env.APPLY_FIXES_EVENT == github.event_name) && env.APPLY_FIXES_MODE == 'commit' && github.ref != 'refs/heads/main' && (github.event_name == 'push' || github.event.pull_request.head.repo.full_name == github.repository)
- uses: stefanzweifel/git-auto-commit-action@v4
+ uses: stefanzweifel/git-auto-commit-action@8756aa072ef5b4a080af5dc8fef36c5d586e521d
+ if: env.APPLY_FIXES_IF_COMMIT == 'true'
  with:
- branch: ${{ github.event.pull_request.head.ref || github.head_ref || github.ref }}
+ branch: >-
+ ${{
+ github.event.pull_request.head.ref ||
+ github.head_ref ||
+ github.ref
+ }}
  commit_message: "[MegaLinter] Apply linters fixes"
  commit_user_name: "github-actions"
  commit_user_email: "github-actions[bot]@users.noreply.github.com"