Skip to content

chore(ci): add action metadata guardrails - #8

Closed
developjik wants to merge 1 commit into
mainfrom
auto/notify-maint-20260406
Closed

chore(ci): add action metadata guardrails#8
developjik wants to merge 1 commit into
mainfrom
auto/notify-maint-20260406

Conversation

@developjik

@developjik developjik commented Apr 6, 2026

Copy link
Copy Markdown
Owner

Summary

  • add CI workflow to validate GitHub Action metadata on PR/push
  • enforce runs.using: node20 and runs.main: dist/index.js across all action directories
  • verify bundled dist/index.js exists for every action
  • document the validation policy in Korean/English READMEs

Validation

  • ./scripts/validate-actions.sh (pass)
  • local actionlint run skipped because binary is not installed; CI runs rhysd/actionlint@v1

Why

This reduces metadata drift and catches runtime/entrypoint mismatches early, improving compatibility and release stability.

@chatgpt-codex-connector chatgpt-codex-connector Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 062a56bfc6

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

Comment on lines +13 to +14
using=$(awk -F"'" '/^ using:/{print $2}' "$action_file" | head -n1)
main=$(awk -F"'" '/^ main:/{print $2}' "$action_file" | head -n1)

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P2 Badge Accept valid unquoted runs fields

The metadata parser only extracts values wrapped in single quotes (awk -F"'"), so a valid action.yml using using: node20 or using: "node20" (same for main) is treated as missing and fails CI. This creates false negatives on formatting-only edits even when runs.using and runs.main are semantically correct, which undermines the guardrail’s stated purpose of enforcing values rather than quote style.

Useful? React with 👍 / 👎.

@developjik

Copy link
Copy Markdown
Owner Author

Closing as superseded by #10, which merged the action metadata validation workflow after fixing the actionlint CI failure and resolving the stale conflict path.

@developjik developjik closed this May 16, 2026
@developjik
developjik deleted the auto/notify-maint-20260406 branch May 16, 2026 08:44
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant