ci.yml

name: CI
on:
  pull_request:
    branches:
      - main

jobs:
  xrefcheck:
    name: Check references
    runs-on: ubuntu-latest
    steps:
    - uses: actions/checkout@v4
    - uses: serokell/xrefcheck-action@v1

  codeowners:
    name: GitHub CODEOWNERS Validator
    runs-on: ubuntu-latest
    steps:
    - uses: actions/checkout@v4
    - uses: mszostok/codeowners-validator@v0.7.4
      with:
        # GitHub access token is required only if the `owners` check is enabled
        # See https://github.com/mszostok/codeowners-validator/blob/main/docs/gh-auth.md#public-repositories
        github_access_token: "${{ secrets.OWNERS_VALIDATOR_GITHUB_SECRET }}"

        # "The comma-separated list of experimental checks that should be executed. By default, all experimental checks are turned off. Possible values: notowned,avoid-shadowing"
        experimental_checks: "notowned,avoid-shadowing"

        # The owner and repository name. For example, gh-codeowners/codeowners-samples. Used to check if GitHub team is in the given organization and has permission to the given repository."
        owner_checker_repository: "${{ github.repository }}"

        # Specifies whether CODEOWNERS may have unowned files. For example, `/infra/oncall-rotator/oncall-config.yml` doesn't have owner and this is not reported.
        owner_checker_allow_unowned_patterns: "false"

        # Specifies whether only teams are allowed as owners of files.
        owner_checker_owners_must_be_teams: "false"