Skip to content

Fix workflow issues caught by actionlint#139

Merged
greenc-FNAL merged 2 commits intoFramework-R-D:mainfrom
greenc-FNAL:maintenance/actionlint-fixes
Dec 2, 2025
Merged

Fix workflow issues caught by actionlint#139
greenc-FNAL merged 2 commits intoFramework-R-D:mainfrom
greenc-FNAL:maintenance/actionlint-fixes

Conversation

@greenc-FNAL
Copy link
Contributor

  • fix(workflows): Resolve actionlint warnings and logic in CI
  • Fix variable/command output splitting with double quotes

google-labs-jules bot and others added 2 commits December 1, 2025 21:53
This commit addresses multiple `actionlint` warnings and improves the
robustness of the CI workflows.

- **clang-tidy-fix.yaml**: Mitigates a script injection warning by
  passing the untrusted `github.event.comment.body` through a sanitized
  environment variable before use in the `run` script.

- **cmake-build.yaml**: Refactors the job structure to resolve
  property warnings and a logic flaw that prevented manual triggers
  from running correctly. The change separates change-detection and
  matrix-generation into two distinct, lightweight jobs, ensuring
  the build runs correctly for all trigger types.
@greenc-FNAL
Copy link
Contributor Author

[greenc@scisoftbuild02] phlex (main) $ docker run --rm -v $(pwd):/repo --workdir /repo rhysd/actionlint:latest | grep -Ece '^\.github/'
13
[greenc@scisoftbuild02] phlex (main) $ git switch -
Switched to branch 'maintenance/actionlint-fixes'
Your branch is up to date with 'greenc-FNAL/maintenance/actionlint-fixes'.
[greenc@scisoftbuild02] phlex (maintenance/actionlint-fixes) $ docker run --rm -v $(pwd):/repo --workdir /repo rhysd/actionlint:latest | grep -Ece '^\.github/'
0

@greenc-FNAL greenc-FNAL merged commit 4e67f8c into Framework-R-D:main Dec 2, 2025
30 checks passed
knoepfel pushed a commit to knoepfel/phlex that referenced this pull request Dec 2, 2025
* fix(workflows): Resolve actionlint warnings and logic in CI

This commit addresses multiple `actionlint` warnings and improves the
robustness of the CI workflows.

- **clang-tidy-fix.yaml**: Mitigates a script injection warning by
  passing the untrusted `github.event.comment.body` through a sanitized
  environment variable before use in the `run` script.

- **cmake-build.yaml**: Refactors the job structure to resolve
  property warnings and a logic flaw that prevented manual triggers
  from running correctly. The change separates change-detection and
  matrix-generation into two distinct, lightweight jobs, ensuring
  the build runs correctly for all trigger types.

* Fix variable/command output splitting with double quotes

---------

Co-authored-by: google-labs-jules[bot] <161369871+google-labs-jules[bot]@users.noreply.github.com>
@greenc-FNAL greenc-FNAL deleted the maintenance/actionlint-fixes branch January 5, 2026 21:54
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants