Black for GitHub

[jamesgeddes]

Hello everyone,

I was wondering whether a “fix-on-the-fly” mode, invoked via, for example, a --autofix flag, has ever been considered. Such a feature could:

1. Automatically apply non-breaking corrections (sorting, formatting, minor key re-ordering) rather than only reporting them
2. Reduce manual steps and help keep workflows consistently formatted in CI pipelines

I, for one, would love to see a Black-style, opinionated linter that automatically fixes all of the security and style issues in my workflows. Zizmore is already a significant step toward that goal.

If this idea has already been discussed, I would be grateful for pointers to the relevant thread or RFC. If not, would the maintainers be open to exploring it as a future enhancement? I believe it could increase adoption by streamlining feedback loops.

Then we really will have beautiful clean workflows!

Thank you for your work on zizmore, and I look forward to your thoughts.

[woodruffw]

Hey @jamesgeddes, thanks for opening a discussion. Could you look at #28 and see if that aligns with what you're asking for? A fix mode is something that I've been thinking about, and there's some discussion in that issue.

[woodruffw]

(Or are you asking about something more general, like a non-security CQA/linter for GitHub Actions? If so actionlint might be more relevant than zizmor, since the former is a general linting tool and zizmor is designed primarily for security rules.)