document on encryption at rest #623
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| on: | |
| workflow_dispatch: | |
| push: | |
| branches: | |
| - main | |
| tags: | |
| - 'v[0-9]+.[0-9]+.[0-9]+*' # match basic semver tags | |
| pull_request: | |
| branches: | |
| - main | |
| - 'release-*' | |
| jobs: | |
| lint: | |
| runs-on: ubuntu-latest | |
| steps: | |
| - name: Checkout | |
| uses: actions/checkout@v4 | |
| - name: Lint Shell Scripts | |
| continue-on-error: true | |
| run: | | |
| sudo apt-get update | |
| sudo apt-get install shellcheck | |
| shellcheck **/*.sh | |
| - name: Lint PowerShell Scripts | |
| continue-on-error: true | |
| run: | | |
| pwsh -Command "Invoke-ScriptAnalyzer -EnableExit -Recurse -Path ." | |
| - name: Lint Lua | |
| continue-on-error: true | |
| run: | | |
| sudo apt-get install -y luarocks | |
| sudo luarocks install luacheck | |
| luacheck **/*.lua | |
| - name: Lint TeX Files | |
| continue-on-error: true | |
| run: | | |
| sudo apt-get install chktex | |
| chktex **/*.tex | |
| - name: Lint YAML Files | |
| continue-on-error: true | |
| run: | | |
| sudo apt-get update | |
| sudo apt-get install yamllint | |
| yamllint -f parsable **/*.yml | |
| semgrep-scan: | |
| runs-on: ubuntu-latest | |
| container: | |
| image: returntocorp/semgrep:latest | |
| steps: | |
| - name: Checkout repository | |
| uses: actions/checkout@v4 | |
| - name: Semgrep Scan | |
| continue-on-error: true | |
| run: | | |
| semgrep --config "p/r2c" . | |