chore: Pin Github Actions to Commit Hashes (NOBUMP) #1
claws.yml Required
on: pull_request
Find New/Updated Github Workflows
6s
Analyze Github Workflows
13s
Annotations
5 errors
|
Analyze Github Workflows
Process completed with exit code 1.
|
|
Analyze Github Workflows:
.github/workflows/release.yml#L63
Shellcheck found some issues with this shell script:
In - line 1:
gh pr merge $${{ steps.create_pull_request.outputs.pull-request-number }} --squash --auto --delete-branch
^-- SC2086 (info): Double quote to prevent globbing and word splitting.
Did you mean:
gh pr merge "$${{ steps.create_pull_request.outputs.pull-request-number }}" --squash --auto --delete-branch
For more information:
https://www.shellcheck.net/wiki/SC2086 -- Double quote to prevent globbing ...
|
|
Analyze Github Workflows:
.github/workflows/release.yml#L63
This workflow automatically merges user-supplied pull requests.
Please review the workflow to ensure this is necessary and its logic is sound.
For more information:
https://github.com/betterment/claws/blob/main/README.md#automaticmerge
|
|
Analyze Github Workflows:
.github/workflows/release.yml#L45
Shellcheck found some issues with this shell script:
In - line 1:
cider version $${{ steps.version.outputs.version }}
^-- SC2086 (info): Double quote to prevent globbing and word splitting.
Did you mean:
cider version "$${{ steps.version.outputs.version }}"
For more information:
https://www.shellcheck.net/wiki/SC2086 -- Double quote to prevent globbing ...
|
|
Analyze Github Workflows:
.github/workflows/release.yml#L3
This flags workflows that may be using risky triggers to execute.
For more information:
https://github.com/betterment/claws/blob/main/README.md#riskytriggers
|