fix(docker): Anonymous image pulls now work. --enable=docker no longer grants keychain access. #334

	name: Shell Lint

	on:
	push:
	branches:
	- main
	paths:
	- "bin/**"
	- "scripts/**"
	- "tests/**"
	- ".github/workflows/shell-lint.yml"
	pull_request:
	paths:
	- "bin/**"
	- "scripts/**"
	- "tests/**"
	- ".github/workflows/shell-lint.yml"
	workflow_dispatch:

	# Disallow all GITHUB_TOKEN permissions by default
	permissions: {}

	concurrency:
	group: ${{ github.workflow }}-${{ github.event.pull_request.number \|\| github.ref_name }}
	cancel-in-progress: true

	jobs:
	lint-shell:
	name: Shell Lint
	runs-on: ubuntu-latest

	steps:
	- name: Checkout branch
	uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6
	with:
	persist-credentials: false

	- name: Install shellcheck and shfmt
	run: \|
	sudo apt-get update
	sudo apt-get install -y shellcheck shfmt

	- name: Run shellcheck
	run: \|
	shellcheck_bin_files=()
	while IFS= read -r shell_file; do
	shellcheck_bin_files+=("$shell_file")
	done < <(find bin -type f -name '*.sh' \| LC_ALL=C sort)
	shellcheck --external-sources \
	"${shellcheck_bin_files[@]}" \
	scripts/generate-dist.sh

	- name: Run shfmt check (advisory)
	continue-on-error: true
	run: \|
	shfmt -d -i 2 -ci \
	bin/safehouse.sh \
	scripts/generate-dist.sh

Navigation Menu