v1.0.1

2026-06-23 11:48:28 +02:00 · 2026-03-23 11:10:48 +01:00
commit 822fa07d45
11 changed files with 3849 additions and 0 deletions
@@ -0,0 +1,66 @@
+name: CI — Shell Quality Check
+
+on:
+  push:
+    branches: [main, develop]
+  pull_request:
+    branches: [main]
+
+jobs:
+  shellcheck:
+    name: ShellCheck
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+
+      - name: Install ShellCheck
+        run: sudo apt-get install -y shellcheck
+
+      - name: Run ShellCheck on websec-audit.sh
+        run: |
+          shellcheck -S warning \
+            --shell=bash \
+            --exclude=SC2086 \
+            websec-audit.sh
+        # SC2086: Double-quote to prevent globbing — intentionally disabled
+        # for nmap/sqlmap/gobuster flag passing which requires word splitting
+
+      - name: Run ShellCheck on install.sh
+        run: |
+          shellcheck -S warning \
+            --shell=bash \
+            install.sh
+
+  syntax-check:
+    name: Bash Syntax Check
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+
+      - name: Check bash syntax — websec-audit.sh
+        run: bash -n websec-audit.sh && echo "Syntax OK"
+
+      - name: Check bash syntax — install.sh
+        run: bash -n install.sh && echo "Syntax OK"
+
+  permissions-check:
+    name: File Permissions
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+
+      - name: Check scripts are executable
+        run: |
+          for script in websec-audit.sh install.sh; do
+            if [[ ! -x "$script" ]]; then
+              echo "ERROR: $script is not executable"
+              exit 1
+            fi
+            echo "OK: $script is executable"
+          done