eigent/.github/workflows/lint-markdown.yml
Tong Chen 343050b47f
Some checks are pending
CodeQL Advanced / Analyze (actions) (push) Waiting to run
CodeQL Advanced / Analyze (javascript-typescript) (push) Waiting to run
CodeQL Advanced / Analyze (python) (push) Waiting to run
Pre-commit / pre-commit (push) Waiting to run
Test / Run Python Tests (push) Waiting to run
🎨 add example skills (#1370)
Co-authored-by: Douglas <douglas.ym.lai@gmail.com>
2026-02-26 12:58:39 +08:00

38 lines
983 B
YAML

name: Lint Markdown
# SECURITY: Use pull_request (not pull_request_target) for workflows that
# checkout and execute code from PRs. This ensures fork PRs run with
# read-only permissions and no access to repository secrets.
#
# See: https://securitylab.github.com/research/github-actions-preventing-pwn-requests/
on:
pull_request:
branches:
- main
paths:
- '**.md'
permissions:
contents: read
jobs:
lint:
name: Lint Markdown
runs-on: ubuntu-latest
steps:
- name: Checkout Code
uses: actions/checkout@v6
- name: Get changed markdown files
id: changed-files
uses: tj-actions/changed-files@v47
with:
files: |
**.md
- name: Lint markdown
if: steps.changed-files.outputs.any_changed == 'true'
run: npx markdownlint-cli@0.43.0 --ignore 'resources/**' $CHANGED_FILES
env:
CHANGED_FILES: ${{ steps.changed-files.outputs.all_changed_files }}