Compare commits

..

No commits in common. "master" and "1.0.0" have entirely different histories.

18 changed files with 155 additions and 324 deletions

View File

@ -1,4 +0,0 @@
{
"name": "ludeeus/action-shellcheck",
"image": "mcr.microsoft.com/devcontainers/base:bullseye"
}

View File

@ -1,8 +0,0 @@
version: 2
updates:
- package-ecosystem: "github-actions"
directory: "/"
schedule:
interval: weekly
time: "06:00"
open-pull-requests-limit: 10

22
.github/problem-matcher.json vendored Normal file
View File

@ -0,0 +1,22 @@
{
"problemMatcher": [
{
"owner": "shellcheck",
"pattern": [
{
"regexp": "^In\\s(.+)\\sline\\s(\\d+):$",
"file": 1,
"line": 2
},
{
"regexp": ".*"
},
{
"regexp": "(SC\\d+):\\s(.+)$",
"code": 1,
"message": 2
}
]
}
]
}

View File

@ -2,13 +2,8 @@ name: 'additional_files'
on: on:
push: push:
branches: branches: ["master"]
- "master"
pull_request: pull_request:
branches:
- "master"
permissions: {}
jobs: jobs:
additional_files: additional_files:
@ -21,14 +16,14 @@ jobs:
- macos-latest - macos-latest
steps: steps:
- name: Checkout - name: Checkout
uses: actions/checkout@v4.1.0 uses: actions/checkout@v2
- name: Run ShellCheck - name: Run ShellCheck
uses: ./ uses: ./
id: check id: check
with: with:
additional_files: run finish discovery additional_files: run finish discovery
ignore_paths: ignore ignore: ignore
scandir: testfiles scandir: testfiles
- name: Verify check - name: Verify check

View File

@ -1,18 +1,13 @@
name: 'ignore_names' name: 'base'
on: on:
push: push:
branches: branches: ["master"]
- "master"
pull_request: pull_request:
branches:
- "master"
permissions: {}
jobs: jobs:
ignore_names: base:
name: ignore_names name: base
runs-on: ${{ matrix.os }} runs-on: ${{ matrix.os }}
strategy: strategy:
matrix: matrix:
@ -21,19 +16,18 @@ jobs:
- macos-latest - macos-latest
steps: steps:
- name: Checkout - name: Checkout
uses: actions/checkout@v4.1.0 uses: actions/checkout@v2
- name: Run ShellCheck - name: Run ShellCheck
uses: ./ uses: ./
id: check id: check
with: with:
ignore_paths: ignore ignore: ignore
ignore_names: ignore_single_file.sh
- name: Verify check - name: Verify check
run: | run: |
expect="testfiles/test.bash" expect="testfiles/test.bash"
notexpect="testfiles/ignore_single_file.sh" notexpect="testfiles/ignore/ignore.bash"
if [[ ! "${{ steps.check.outputs.files }}" =~ $expect ]];then if [[ ! "${{ steps.check.outputs.files }}" =~ $expect ]];then
echo "::error:: Expected file $expect not found in ${{ steps.check.outputs.files }}" echo "::error:: Expected file $expect not found in ${{ steps.check.outputs.files }}"
@ -41,4 +35,4 @@ jobs:
elif [[ "${{ steps.check.outputs.files }}" =~ $notexpect ]];then elif [[ "${{ steps.check.outputs.files }}" =~ $notexpect ]];then
echo "::error:: Expected file $notexpect found in ${{ steps.check.outputs.files }}" echo "::error:: Expected file $notexpect found in ${{ steps.check.outputs.files }}"
exit 1 exit 1
fi fi

View File

@ -2,13 +2,8 @@ name: 'check_together'
on: on:
push: push:
branches: branches: ["master"]
- "master"
pull_request: pull_request:
branches:
- "master"
permissions: {}
jobs: jobs:
check_together: check_together:
@ -21,13 +16,13 @@ jobs:
- macos-latest - macos-latest
steps: steps:
- name: Checkout - name: Checkout
uses: actions/checkout@v4.1.0 uses: actions/checkout@v2
- name: Run ShellCheck - name: Run ShellCheck
uses: ./ uses: ./
id: check id: check
with: with:
ignore_paths: ignore ignore: ignore
check_together: true check_together: true
- name: Verify check - name: Verify check

View File

@ -1,74 +0,0 @@
name: "ignore_paths"
on:
push:
branches:
- "master"
pull_request:
branches:
- "master"
permissions: {}
jobs:
ignore_paths:
name: ignore_paths
runs-on: ${{ matrix.os }}
strategy:
matrix:
os:
- ubuntu-latest
- macos-latest
steps:
- name: Checkout
uses: actions/checkout@v4.1.0
- name: Run ShellCheck
uses: ./
id: check
with:
ignore_paths: ignore ./testfiles/ignore_some/duplicate_name.bash **/ignore_some/ignore.bash
- name: Verify check
run: |
fail=false
# verify a non-ignored path is not excluded
expect="testfiles/test.bash"
if [[ ! "${{ steps.check.outputs.files }}" =~ $expect ]];then
echo "::error:: Expected file $expect not found in ${{ steps.check.outputs.files }}"
fail=true
fi
# verify a file with the same name as an ignored file but at a
# different path is not excluded
expect="testfiles/duplicate_name.bash"
if [[ ! "${{ steps.check.outputs.files }}" =~ $expect ]];then
echo "::error:: Expected file $expect not found in ${{ steps.check.outputs.files }}"
fail=true
fi
# verify ignored full path excluded
notexpect="testfiles/ignore_some/duplicate_name.bash"
if [[ "${{ steps.check.outputs.files }}" =~ $notexpect ]];then
echo "::error:: Unexpected file $notexpect found in ${{ steps.check.outputs.files }}"
fail=true
fi
# verify ignored directory excluded
notexpect="testfiles/ignore/ignore.bash"
if [[ "${{ steps.check.outputs.files }}" =~ $notexpect ]];then
echo "::error:: Unexpected file $notexpect found in ${{ steps.check.outputs.files }}"
fail=true
fi
# verify ignored glob excluded
notexpect="testfiles/ignore_some/ignore.bash"
if [[ "${{ steps.check.outputs.files }}" =~ $notexpect ]];then
echo "::error:: Unexpected file $notexpect found in ${{ steps.check.outputs.files }}"
fail=true
fi
if $fail;then
exit 1
fi

View File

@ -1,14 +1,9 @@
name: 'scandir' name: 'scandir'
on: on:
push: push:
branches: branches: ["master"]
- "master"
pull_request: pull_request:
branches:
- "master"
permissions: {}
jobs: jobs:
scandir: scandir:
@ -21,7 +16,7 @@ jobs:
- macos-latest - macos-latest
steps: steps:
- name: Checkout - name: Checkout
uses: actions/checkout@v4.1.0 uses: actions/checkout@v2
- name: Run ShellCheck - name: Run ShellCheck
uses: ./ uses: ./
@ -30,8 +25,8 @@ jobs:
scandir: testfiles/scandir scandir: testfiles/scandir
- name: Verify check - name: Verify check
run: | run: |
expect="testfiles/scandir/run[[:space:]]me.bash" expect="testfiles/scandir/test.bash"
notexpect="testfiles/test.bash" notexpect="testfiles/test.bash"
if [[ ! "${{ steps.one.outputs.files }}" =~ $expect ]];then if [[ ! "${{ steps.one.outputs.files }}" =~ $expect ]];then
@ -40,17 +35,17 @@ jobs:
elif [[ "${{ steps.one.outputs.files }}" =~ $notexpect ]];then elif [[ "${{ steps.one.outputs.files }}" =~ $notexpect ]];then
echo "::error:: Expected file $notexpect found in ${{ steps.one.outputs.files }}" echo "::error:: Expected file $notexpect found in ${{ steps.one.outputs.files }}"
exit 1 exit 1
fi fi
- name: Run ShellCheck - name: Run ShellCheck
uses: ./ uses: ./
id: two id: two
with: with:
scandir: './testfiles/scandir' scandir: './testfiles/scandir'
ignore_paths: ignore ignore: ignore
- name: Verify check - name: Verify check
run: | run: |
expect="testfiles/scandir/test.bash" expect="testfiles/scandir/test.bash"
notexpect="testfiles/test.bash" notexpect="testfiles/test.bash"
@ -60,4 +55,4 @@ jobs:
elif [[ "${{ steps.two.outputs.files }}" =~ $notexpect ]];then elif [[ "${{ steps.two.outputs.files }}" =~ $notexpect ]];then
echo "::error:: Expected file $notexpect found in ${{ steps.two.outputs.files }}" echo "::error:: Expected file $notexpect found in ${{ steps.two.outputs.files }}"
exit 1 exit 1
fi fi

View File

@ -1,36 +1,30 @@
# ShellCheck # ShellCheck
_GitHub action for [ShellCheck](https://www.shellcheck.net/)._ _GitHub action for ShellCheck._
## Example ## Example
```yaml ```yaml
on: on:
push: push:
branches: branch:
- master - master
name: "Trigger: Push action" name: 'Trigger: Push action'
permissions: {}
jobs: jobs:
shellcheck: shellcheck:
name: Shellcheck name: Shellcheck
runs-on: ubuntu-latest runs-on: ubuntu-latest
steps: steps:
- uses: actions/checkout@v4 - uses: actions/checkout@v2
- name: Run ShellCheck - name: Run ShellCheck
uses: ludeeus/action-shellcheck@master uses: ludeeus/action-shellcheck@master
``` ```
## ShellCheck options ## Globally disable checks
You can pass any supported ShellCheck option or flag with the `SHELLCHECK_OPTS` env key in the job definition. To disable specific checks add it to a `SHELLCHECK_OPTS` env key in the job definition.
Some examples include:
- To disable specific checks (eg: `-e SC2059 -e SC2034 -e SC1090`)
- To test against different shells (eg: `-s dash` or `-s ksh`)
example: example:
@ -42,18 +36,14 @@ example:
SHELLCHECK_OPTS: -e SC2059 -e SC2034 -e SC1090 SHELLCHECK_OPTS: -e SC2059 -e SC2034 -e SC1090
``` ```
## Ignore paths and names ## Ignore paths
You can use the `ignore_paths` and `ignore_names` input to disable specific directories and files. You can use the `ignore` input to disable specific directories.
These are passed as environment variables, and should evaluate to a single space-separated string.
It may be convenient to use [`>-`](https://yaml.org/spec/1.2.2/#65-line-folding) for readability if you have multiple selectors.
```text ```text
sample structure: sample structure:
sample/directory/with/files/ignoreme/test.sh sample/directory/with/files/toignore/test.sh
sample/directory/with/files/ignoremetoo/test.sh
sample/directory/with/files/test.sh sample/directory/with/files/test.sh
sample/directory/with/files/ignorable.sh
``` ```
example: example:
@ -63,27 +53,10 @@ example:
- name: Run ShellCheck - name: Run ShellCheck
uses: ludeeus/action-shellcheck@master uses: ludeeus/action-shellcheck@master
with: with:
ignore_paths: >- ignore: toignore
ignoreme
ignoremetoo
ignore_names: ignorable.sh
``` ```
This will skip `sample/directory/with/files/ignoreme/test.sh`, `sample/directory/with/files/ignoremetoo/test.sh` and `sample/directory/with/files/ignorable.sh`. This will skip `sample/directory/with/files/toignore/test.sh`
You can also ignore specific files using full paths or glob patterns with `ignore_paths`.
example:
```yaml
...
- name: Run ShellCheck
uses: ludeeus/action-shellcheck@master
with:
ignore_paths: ./sample/directory/with/files/ignorable.sh **/ignoreme/test.sh
```
This will skip `sample/directory/with/files/ignorable.sh` and `sample/directory/with/files/ignoreme/test.sh`.
## Minimum severity of errors to consider (error, warning, info, style) ## Minimum severity of errors to consider (error, warning, info, style)
@ -140,29 +113,15 @@ If you need to scan for unusual files, you can use the `additional_files` key.
additional_files: 'run finish' additional_files: 'run finish'
``` ```
## Change output format ## Disable problem matcher
Shellcheck can print output in these formats: `checkstyle`, `diff`, `gcc`, `json`, `json1`, `quiet`, `tty`. See some examples [here](https://github.com/koalaman/shellcheck/wiki/Integration#pick-the-output-format-that-makes-your-life-easier). If you do not want to have the problem-matcher annotate files, you can disable it
by setting `disable_matcher` to `true`.
- `tty` has multi-line log messages
- `gcc` has single-line log messages
```yaml ```yaml
... ...
- name: Run ShellCheck - name: Run ShellCheck
uses: ludeeus/action-shellcheck@master uses: ludeeus/action-shellcheck@master
with: with:
format: tty disable_matcher: true
``` ```
## Run a specific version of Shellcheck
If running the latest stable version of Shellcheck is not to your liking, you can specify a concrete version of Shellcheck to be used. When specifying a custom version, please use any of the released versions listed in the [Shellcheck repository](https://github.com/koalaman/shellcheck/tags).
```yaml
...
- name: Run ShellCheck
uses: ludeeus/action-shellcheck@master
with:
version: v0.9.0
```

View File

@ -3,22 +3,13 @@ author: "Ludeeus <hi@ludeeus.dev>"
description: "GitHub action for ShellCheck." description: "GitHub action for ShellCheck."
inputs: inputs:
additional_files: additional_files:
description: "A space separated list of additional filename to check" description: "A space seperated list of additional filename to check"
required: false required: false
default: "" default: ""
ignore: ignore:
description: "Paths to ignore when running ShellCheck" description: "Paths to ignore when running ShellCheck"
required: false required: false
default: "" default: ""
deprecationMessage: "Use ignore_paths or ignore_names instead."
ignore_paths:
description: "Paths to ignore when running ShellCheck"
required: false
default: ""
ignore_names:
description: "Names to ignore when running ShellCheck"
required: false
default: ""
severity: severity:
description: "Minimum severity of errors to consider. Options: [error, warning, info, style]" description: "Minimum severity of errors to consider. Options: [error, warning, info, style]"
required: false required: false
@ -35,19 +26,10 @@ inputs:
description: "Set to true to skip using problem-matcher" description: "Set to true to skip using problem-matcher"
required: false required: false
default: "false" default: "false"
deprecationMessage: "There are no problem-matchers, this setting does not do anything."
format:
description: "Output format (checkstyle, diff, gcc, json, json1, quiet, tty)"
required: false
default: "gcc"
version:
description: "Specify a concrete version of ShellCheck to use"
required: false
default: "stable"
outputs: outputs:
files: files:
description: A list of files with issues description: A list of files with issues
value: ${{ steps.check.outputs.filepaths }} value: ${{ steps.filepaths.outputs.filepaths }}
options: options:
description: The options used description: The options used
value: ${{ steps.options.outputs.options }} value: ${{ steps.options.outputs.options }}
@ -56,11 +38,16 @@ branding:
color: "gray-dark" color: "gray-dark"
runs: runs:
using: "composite" using: "composite"
steps: steps:
- name: Enable problem-matcher
shell: bash
run: |
if [[ ${{ inputs.disable_matcher }} != "true" ]]; then
echo "::add-matcher::${{ github.action_path }}/.github/problem-matcher.json"
fi
- name: Download shellcheck - name: Download shellcheck
shell: bash shell: bash
env:
INPUT_VERSION: ${{ inputs.version }}
run: | run: |
if [[ "${{ runner.os }}" == "macOS" ]]; then if [[ "${{ runner.os }}" == "macOS" ]]; then
osvariant="darwin" osvariant="darwin"
@ -68,102 +55,61 @@ runs:
osvariant="linux" osvariant="linux"
fi fi
scversion="stable"
baseurl="https://github.com/koalaman/shellcheck/releases/download" baseurl="https://github.com/koalaman/shellcheck/releases/download"
curl -Lso "${{ github.action_path }}/sc.tar.xz" \ curl -Lso "${{ github.action_path }}/sc.tar.xz" \
"${baseurl}/${INPUT_VERSION}/shellcheck-${INPUT_VERSION}.${osvariant}.x86_64.tar.xz" "${baseurl}/${scversion}/shellcheck-${scversion}.${osvariant}.x86_64.tar.xz"
tar -xf "${{ github.action_path }}/sc.tar.xz" -C "${{ github.action_path }}" tar -xf "${{ github.action_path }}/sc.tar.xz" -C "${{ github.action_path }}"
mv "${{ github.action_path }}/shellcheck-${INPUT_VERSION}/shellcheck" \ mv "${{ github.action_path }}/shellcheck-${scversion}/shellcheck" \
"${{ github.action_path }}/shellcheck" "${{ github.action_path }}/shellcheck"
- name: Display shellcheck version
shell: bash
run: |
"${{ github.action_path }}/shellcheck" --version
- name: Set options - name: Set options
shell: bash shell: bash
id: options id: options
env:
INPUT_SEVERITY: ${{ inputs.severity }}
INPUT_FORMAT: ${{ inputs.format }}
run: | run: |
declare -a options declare -a options
if [[ -n "${INPUT_SEVERITY}" ]]; then if [[ -n "${{ inputs.severity }}" ]]; then
options+=("-S ${INPUT_SEVERITY}") options+=("-S ${{ inputs.severity }}")
fi fi
options+=("--format=${INPUT_FORMAT}") echo "::set-output name=options::${options[@]}"
echo "options=${options[@]}" >> $GITHUB_OUTPUT
- name: Gather excluded paths - name: Gather excluded paths
shell: bash shell: bash
id: exclude id: exclude
env:
INPUT_IGNORE: ${{ inputs.ignore }}
INPUT_IGNORE_PATHS: ${{ inputs.ignore_paths }}
INPUT_IGNORE_NAMES: ${{ inputs.ignore_names }}
run: | run: |
declare -a excludes declare -a excludes
set -f # temporarily disable globbing so that globs in input aren't expanded excludes+=("! -path \"*./.git/*\"")
excludes+=("! -path \"*.go\"")
excludes+=("! -path *./.git/*") excludes+=("! -path \"*/mvnw\"")
excludes+=("! -path *.go") for path in ${{ inputs.ignore }}; do
excludes+=("! -path */mvnw") echo "::debug:: Adding "$path" to excludes"
if [[ -n "${INPUT_IGNORE}" ]]; then excludes+=("! -path \"*./$path/*\"")
for path in ${INPUT_IGNORE}; do excludes+=("! -path \"*/$path/*\"")
excludes+=("! -path *./$path/*")
excludes+=("! -path */$path/*")
excludes+=("! -path $path")
done
else
for path in ${INPUT_IGNORE_PATHS}; do
excludes+=("! -path *./$path/*")
excludes+=("! -path */$path/*")
excludes+=("! -path $path")
done
fi
for name in ${INPUT_IGNORE_NAMES}; do
excludes+=("! -name $name")
done done
echo "excludes=${excludes[@]}" >> $GITHUB_OUTPUT echo "::set-output name=excludes::${excludes[@]}"
set +f # re-enable globbing
- name: Gather additional files - name: Gather additional files
shell: bash shell: bash
id: additional id: additional
env:
INPUT_ADDITIONAL_FILES: ${{ inputs.additional_files }}
run: | run: |
declare -a files declare -a files
for file in ${INPUT_ADDITIONAL_FILES}; do for file in ${{ inputs.additional_files }}; do
files+=("-o -name *$file") echo "::debug:: Adding "$file" to excludes"
files+=("-o -name \"*$file\"")
done done
echo "files=${files[@]}" >> $GITHUB_OUTPUT echo "::set-output name=files::${files[@]}"
- name: Run the check - name: Gather base file paths
shell: bash shell: bash
id: check id: filepaths
env:
INPUT_SCANDIR: ${{ inputs.scandir }}
INPUT_CHECK_TOGETHER: ${{ inputs.check_together }}
INPUT_EXCLUDE_ARGS: ${{ steps.exclude.outputs.excludes }}
INPUT_ADDITIONAL_FILE_ARGS: ${{ steps.additional.outputs.files }}
INPUT_SHELLCHECK_OPTIONS: ${{ steps.options.outputs.options }}
run: | run: |
statuscode=0
declare -a filepaths declare -a filepaths
shebangregex="^#! */[^ ]*/(env *)?[abk]*sh" shebangregex="^#! */[^ ]*/(env *)?[abkz]*sh"
set -f # temporarily disable globbing so that globs in inputs aren't expanded for path in $(find "${{ inputs.scandir }}" \
-type f -type f ${{ steps.exclude.outputs.excludes }} \
while IFS= read -r -d '' file; do
filepaths+=("$file")
done < <(find "${INPUT_SCANDIR}" \
${INPUT_EXCLUDE_ARGS} \
-type f \
'(' \ '(' \
-name '*.bash' \ -name '*.bash' \
-o -name '.bashrc' \ -o -name '.bashrc' \
@ -191,35 +137,63 @@ runs:
-o -path '*/.profile' \ -o -path '*/.profile' \
-o -path '*/profile' \ -o -path '*/profile' \
-o -name '*.shlib' \ -o -name '*.shlib' \
${INPUT_ADDITIONAL_FILE_ARGS} \ ${{ steps.additional.outputs.files }} \
')' \ ')'\
-print0) -print); do
filepaths+=("$path");
done
while IFS= read -r -d '' file; do for file in $(find "${{ inputs.scandir }}" ${{ steps.exclude.outputs.excludes }} -type f ! -name '*.*' -perm /111 -print); do
head -n1 "$file" | grep -Eqs "$shebangregex" || continue head -n1 "$file" | grep -Eqs "$shebangregex" || continue
filepaths+=("$file") filepaths+=("$file");
done < <(find "${INPUT_SCANDIR}" \ done
${INPUT_EXCLUDE_ARGS} \ echo "::set-output name=filepaths::${filepaths[@]}"
-type f ! -name '*.*' -perm /111 \
-print0)
if [[ -n "${INPUT_CHECK_TOGETHER}" ]]; then - name: Check bin subdirs
"${{ github.action_path }}/shellcheck" \ shell: bash
${INPUT_SHELLCHECK_OPTIONS} \ run: |
"${filepaths[@]}" || statuscode=$? if find "${{ inputs.scandir }}" ${{ steps.exclude.outputs.excludes }} -path '*bin/*/*' -type f -perm /111 -print |
else grep .
for file in "${filepaths[@]}"; do then
"${{ github.action_path }}/shellcheck" \ echo "::warning:: subdirectories of bin directories are not usable via PATH"
${INPUT_SHELLCHECK_OPTIONS} \
"$file" || statuscode=$?
done
fi fi
echo "filepaths=${filepaths[@]}" >> $GITHUB_OUTPUT - name: Check no suffix in PATH
echo "statuscode=$statuscode" >> $GITHUB_OUTPUT
set +f # re-enable globbing
- name: Exit action
shell: bash shell: bash
run: exit ${{steps.check.outputs.statuscode}} run: |
if find "${{ inputs.scandir }}" ${{ steps.exclude.outputs.excludes }} -path '*bin/*' -name '*.*' -type f -perm /111 -perm /444 -print |
grep .
then
echo "::warning:: programs in PATH should not have a filename suffix"
fi
- name: Run the file check
id: check
shell: bash
run: |
statuscode=0
if [[ -n "${{ inputs.check_together }}" ]]; then
"${{ github.action_path }}/shellcheck" \
${{ steps.options.outputs.options }} \
${{ steps.filepaths.outputs.filepaths }} || statuscode=$?
else
for file in ${{ steps.filepaths.outputs.filepaths }}; do
echo "::debug::Checking $file"
"${{ github.action_path }}/shellcheck" \
${{ steps.options.outputs.options }} \
"$file" || statuscode=$?;
done
fi
echo "::set-output name=statuscode::$statuscode"
- name: Print information
shell: bash
run: |
echo "Files: ${{steps.filepaths.outputs.filepaths}}"
echo "Excluded: ${{ steps.exclude.outputs.excludes }}"
echo "Options: ${{ steps.options.outputs.options }}"
echo "Status code: ${{steps.check.outputs.statuscode}}"
exit ${{steps.check.outputs.statuscode}}

View File

@ -1,3 +0,0 @@
#!/bin/bash
test="test"
echo "$test"

View File

@ -1,3 +0,0 @@
#!/bin/bash
test="test"
echo "$test"

View File

@ -0,0 +1,5 @@
#!/bin/sh
echo $test $test
echo $test2

View File

@ -1,4 +0,0 @@
#!/usr/bin/sh
test="test"
echo "$test"

View File

@ -1,3 +0,0 @@
#!/bin/bash
test="test"
echo "$test"

View File

@ -1,3 +0,0 @@
#!/bin/bash
test="test"
echo "$test"

View File

@ -1,3 +0,0 @@
#!/bin/bash
test="test"
echo "$test"

View File

@ -1,3 +0,0 @@
#!/usr/bin/env bash
echo "I love spaces"