add lint.sh and check in CI

.github/workflows/lint.yaml

@@ -0,0 +1,20 @@
+name: Lint
+
+on:
+  pull_request:
+    branches: ['main']
+
+jobs:
+  lint:
+    name: Lint
+    runs-on: ubuntu-latest
+
+    permissions:
+      contents: read
+
+    steps:
+    - uses: actions/checkout@v2
+    - run: ./lint.sh
+    - uses: chainguard-dev/actions/nodiff@main
+      with:
+        fixup-command: "./lint.sh"

Makefile

@@ -39,7 +39,7 @@ $(eval $(call build-package,mpc,1.2.1-r2))
 $(eval $(call build-package,isl,0.24-r2))
 $(eval $(call build-package,zlib,1.2.13-r1))
 $(eval $(call build-package,flex,2.6.4-r1))
-$(eval $(call build-package,glibc,2.36-r1))
+$(eval $(call build-package,glibc,2.36-r2))
 $(eval $(call build-package,build-base,1-r3))
 $(eval $(call build-package,gcc,12.2.0-r6))
 $(eval $(call build-package,openssl,3.0.7-r0))
@@ -71,7 +71,7 @@ $(eval $(call build-package,patch,2.7.6-r3))
 $(eval $(call build-package,ncurses,6.3-r2))
 $(eval $(call build-package,pkgconf,1.9.3-r3))
 $(eval $(call build-package,readline,8.1.2-r1))
-$(eval $(call build-package,sqlite,3.39.2-r1))
+$(eval $(call build-package,sqlite,3.39.4-r1))
 $(eval $(call build-package,xz,5.2.6-r2))
 $(eval $(call build-package,python3,3.10.7-r0))
 $(eval $(call build-package,scdoc,1.11.2-r1))

acl.yaml

@@ -7,10 +7,9 @@ package:
     - all
   copyright:
     - paths:
-      - "*"
+        - "*"
       attestation: TODO
       license: LGPL-2.1-or-later AND GPL-2.0-or-later
-
 environment:
   contents:
     packages:
@@ -19,7 +18,6 @@ environment:
       - ca-certificates-bundle
       - build-base
       - attr-dev
-
 pipeline:
   - uses: fetch
     with:
@@ -36,7 +34,6 @@ pipeline:
       mkdir -p "${{targets.destdir}}"/usr/lib
       mv "${{targets.destdir}}"/lib/pkgconfig "${{targets.destdir}}"/usr/lib/
   - uses: strip
-
 subpackages:
   - name: "acl-dev"
     description: "headers for libacl"
@@ -45,7 +42,6 @@ subpackages:
     dependencies:
       runtime:
         - acl
-
   - name: "libacl1"
     description: "library for managing access control lists"
     pipeline:

alsa-lib.yaml

@@ -12,10 +12,6 @@ package:
       license: LGPL-2.1-or-later
 environment:
   contents:
-    repositories:
-      - https://packages.wolfi.dev/os
-    keyring:
-      - https://packages.wolfi.dev/os/wolfi-signing.rsa.pub
     packages:
       - busybox
       - ca-certificates-bundle
@@ -39,7 +35,6 @@ pipeline:
         --enable-aload \
         --disable-dependency-tracking \
         --without-versioned
-
   - uses: autoconf/make
   - uses: autoconf/make-install
   - uses: strip

apk-tools.yaml

@@ -7,13 +7,12 @@ package:
     - all
   copyright:
     - paths:
-      - "*"
+        - "*"
       attestation: TODO
       license: GPL-2.0-only
   dependencies:
     runtime:
       - ca-certificates-bundle
-
 environment:
   contents:
     repositories:
@@ -30,7 +29,6 @@ environment:
       - lua5.3
       - lua5.3-lzlib
       - lua5.3-dev
-
 pipeline:
   - uses: fetch
     with:
@@ -49,7 +47,6 @@ pipeline:
       install -d "${{targets.destdir}}"/etc/apk/keys
       install -d "${{targets.destdir}}"/etc/apk/protected_paths.d
   - uses: strip
-
 subpackages:
   - name: "apk-tools-dev"
     description: "headers for libapk"
@@ -58,7 +55,6 @@ subpackages:
     dependencies:
       runtime:
         - apk-tools
-
   - name: "lua5.3-apk"
     description: "Lua module for libapk"
     pipeline:

attr.yaml

@@ -7,18 +7,16 @@ package:
     - all
   copyright:
     - paths:
-      - "*"
+        - "*"
       attestation: TODO
       license: GPL-2.0-or-later
-
 environment:
   contents:
     packages:
       - wolfi-base
       - busybox
       - ca-certificates-bundle
       - build-base
-
 pipeline:
   - uses: fetch
     with:
@@ -44,7 +42,6 @@ pipeline:
       mkdir -p "${{targets.destdir}}"/usr/lib
       mv "${{targets.destdir}}"/lib/pkgconfig "${{targets.destdir}}"/usr/lib/
   - uses: strip
-
 subpackages:
   - name: "attr-dev"
     description: "headers for libattr"
@@ -53,7 +50,6 @@ subpackages:
     dependencies:
       runtime:
         - attr
-
   - name: "libattr1"
     description: "library for managing filesystem extended attributes"
     pipeline:

autoconf.yaml

@@ -7,14 +7,13 @@ package:
     - all
   copyright:
     - paths:
-      - "*"
+        - "*"
       attestation: TODO
       license: GPL-3.0-or-later
   dependencies:
     runtime:
       - m4
       - perl
-
 environment:
   contents:
     repositories:
@@ -27,7 +26,6 @@ environment:
       - build-base
       - m4
       - perl
-
 pipeline:
   - uses: fetch
     with:
@@ -39,7 +37,6 @@ pipeline:
   - uses: autoconf/make
   - uses: autoconf/make-install
   - uses: strip
-
 subpackages:
   - name: "autoconf-doc"
     description: "autoconf documentation"

automake.yaml

@@ -7,12 +7,11 @@ package:
     - all
   copyright:
     - paths:
-      - "*"
+        - "*"
       attestation: TODO
       license: GPL-3.0-or-later
   dependencies:
     runtime:
-
 environment:
   contents:
     repositories:
@@ -24,7 +23,6 @@ environment:
       - ca-certificates-bundle
       - build-base
       - autoconf
-
 pipeline:
   - uses: fetch
     with:
@@ -36,7 +34,6 @@ pipeline:
   - uses: autoconf/make
   - uses: autoconf/make-install
   - uses: strip
-
 subpackages:
   - name: "automake-doc"
     description: "automake documentation"

bash.yaml

@@ -7,20 +7,18 @@ package:
     - all
   copyright:
     - paths:
-      - "*"
+        - "*"
       attestation: TODO
       license: GPL-3.0-or-later
   dependencies:
     runtime:
-
 environment:
   contents:
     packages:
       - busybox
       - ca-certificates-bundle
       - build-base
       - ncurses-dev
-
 pipeline:
   - uses: fetch
     with:
@@ -42,7 +40,6 @@ pipeline:
   - uses: autoconf/make
   - uses: autoconf/make-install
   - uses: strip
-
 subpackages:
   - name: "bash-doc"
     description: "bash documentation"
@@ -52,7 +49,6 @@ subpackages:
       - runs: |
           mkdir -p "${{targets.subpkgdir}}"/usr/share
           mv "${{targets.destdir}}"/usr/share/doc "${{targets.subpkgdir}}"/usr/share/
-
   - name: "bash-dev"
     description: "bash development headers"
     pipeline:

binutils.yaml

@@ -7,20 +7,18 @@ package:
     - all
   copyright:
     - paths:
-      - "*"
+        - "*"
       attestation: TODO
       license: GPL-3.0-or-later
   dependencies:
     runtime:
-
 secfixes:
   2.39-r1:
     - CVE-2022-38126
   2.39-r2:
     - CVE-2022-38533
   2.39-r3:
     - CVE-2022-38128
-
 environment:
   contents:
     repositories:
@@ -34,7 +32,6 @@ environment:
       - build-base
       - isl
       - texinfo
-
 pipeline:
   - uses: fetch
     with:
@@ -64,7 +61,6 @@ pipeline:
     runs: |
       rm -rf ${{targets.destdir}}/usr/share/info
   - uses: strip
-
 subpackages:
   - name: "binutils-dev"
     description: "binutils development headers"

bison.yaml

@@ -7,13 +7,12 @@ package:
     - all
   copyright:
     - paths:
-      - "*"
+        - "*"
       attestation: TODO
       license: GPL-3.0-or-later
   dependencies:
     runtime:
       - m4
-
 environment:
   contents:
     repositories:
@@ -26,7 +25,6 @@ environment:
       - ca-certificates-bundle
       - build-base
       - m4
-
 pipeline:
   - uses: fetch
     with:

brotli.yaml

@@ -7,14 +7,12 @@ package:
     - all
   copyright:
     - paths:
-      - "*"
+        - "*"
       attestation: TODO
       license: MIT
-
 secfixes:
   1.0.9-r0:
     - CVE-2020-8927
-
 environment:
   contents:
     packages:
@@ -25,7 +23,6 @@ environment:
       - autoconf
       - automake
       - libtool
-
 pipeline:
   - uses: fetch
     with:
@@ -37,7 +34,6 @@ pipeline:
   - uses: autoconf/make
   - uses: autoconf/make-install
   - uses: strip
-
 subpackages:
   - name: "brotli-dev"
     description: "headers for brotli"
@@ -46,19 +42,16 @@ subpackages:
     dependencies:
       runtime:
         - brotli
-
   - name: "libbrotlicommon1"
     pipeline:
       - runs: |
           mkdir -p "${{targets.subpkgdir}}"/usr/lib
           mv "${{targets.destdir}}"/usr/lib/libbrotlicommon.so.* "${{targets.subpkgdir}}"/usr/lib/
-
   - name: "libbrotlienc1"
     pipeline:
       - runs: |
           mkdir -p "${{targets.subpkgdir}}"/usr/lib
           mv "${{targets.destdir}}"/usr/lib/libbrotlienc.so.* "${{targets.subpkgdir}}"/usr/lib/
-
   - name: "libbrotlidec1"
     pipeline:
       - runs: |