mirror of
https://github.com/davidalvarezp/websec-audit.git
synced 2026-06-23 11:48:28 +02:00
67 lines
1.6 KiB
YAML
67 lines
1.6 KiB
YAML
name: CI — Shell Quality Check
|
|
|
|
on:
|
|
push:
|
|
branches: [main, develop]
|
|
pull_request:
|
|
branches: [main]
|
|
|
|
jobs:
|
|
shellcheck:
|
|
name: ShellCheck
|
|
runs-on: ubuntu-latest
|
|
|
|
steps:
|
|
- name: Checkout repository
|
|
uses: actions/checkout@v4
|
|
|
|
- name: Install ShellCheck
|
|
run: sudo apt-get install -y shellcheck
|
|
|
|
- name: Run ShellCheck on websec-audit.sh
|
|
run: |
|
|
shellcheck -S warning \
|
|
--shell=bash \
|
|
--exclude=SC2086 \
|
|
websec-audit.sh
|
|
# SC2086: Double-quote to prevent globbing — intentionally disabled
|
|
# for nmap/sqlmap/gobuster flag passing which requires word splitting
|
|
|
|
- name: Run ShellCheck on install.sh
|
|
run: |
|
|
shellcheck -S warning \
|
|
--shell=bash \
|
|
install.sh
|
|
|
|
syntax-check:
|
|
name: Bash Syntax Check
|
|
runs-on: ubuntu-latest
|
|
|
|
steps:
|
|
- name: Checkout repository
|
|
uses: actions/checkout@v4
|
|
|
|
- name: Check bash syntax — websec-audit.sh
|
|
run: bash -n websec-audit.sh && echo "Syntax OK"
|
|
|
|
- name: Check bash syntax — install.sh
|
|
run: bash -n install.sh && echo "Syntax OK"
|
|
|
|
permissions-check:
|
|
name: File Permissions
|
|
runs-on: ubuntu-latest
|
|
|
|
steps:
|
|
- name: Checkout repository
|
|
uses: actions/checkout@v4
|
|
|
|
- name: Check scripts are executable
|
|
run: |
|
|
for script in websec-audit.sh install.sh; do
|
|
if [[ ! -x "$script" ]]; then
|
|
echo "ERROR: $script is not executable"
|
|
exit 1
|
|
fi
|
|
echo "OK: $script is executable"
|
|
done
|