Skip to content

feat(lint-github-actions): add paths input to scope the audit - #79

Open
toiroakr wants to merge 1 commit into
mainfrom
feat/lint-filter
Open

feat(lint-github-actions): add paths input to scope the audit#79
toiroakr wants to merge 1 commit into
mainfrom
feat/lint-filter

Conversation

@toiroakr

Copy link
Copy Markdown
Contributor

Summary

  • Adds a paths input to lint-github-actions, forwarded to zizmor-action's own inputs. Defaults to . (whole repo), preserving current behavior.
  • zizmor-action splits inputs using unquoted shell word-splitting, so paths accepts either space- or newline-separated lists interchangeably — verified end-to-end against a separate test repository (single path, space-separated multi-path, and newline-separated multi-path, including a case where the broken file is not the first entry in the list).
  • Lets callers scope the audit to just the workflow/action files changed in a PR (e.g. the output of a changed-files action) instead of always auditing the whole repository.
  • Adds a test job (test-paths-filters-to-given-files) exercising the new input against the existing clean/unpinned-action fixtures.
  • Documents the input in the README, including a usage example paired with tj-actions/changed-files, and the empty-string-vs-omitted caveat (an explicitly empty paths overrides zizmor-action's own . default and makes zizmor fail with no paths to audit).

Lets callers pass a space- or newline-separated list of paths (e.g. a
changed-files action output) so only those files are audited instead of
the whole repository. Defaults to "." to preserve current behavior.
@toiroakr
toiroakr marked this pull request as ready for review August 13, 2026 13:51
@toiroakr
toiroakr requested review from a team as code owners August 13, 2026 13:51
@toiroakr toiroakr assigned dqn and unassigned dqn Aug 14, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants