mirror of
https://github.com/garrytan/gstack.git
synced 2026-08-31 18:30:39 +02:00
Garry TanandClaude Fable 5
05a45ddb89
- timeout-minutes on the 6 remaining unbounded jobs (actionlint 5, skill-docs 10, version-gate 10, make-pdf-gate 15, pr-title-sync 5, evals build-image 15) — a hung step sat on GitHub's 360-min default - right-size measured-over-long timeouts: dependency-review 10→5, windows-setup-e2e 15→10 - dependency-review: 2-core runner (28s API call on an 8-core box) and drop .github/workflows/** from its trigger paths (workflow edits have no dependencies to review) - windows caches gain restore-keys: a lockfile bump paid the 26s/43s restore for a guaranteed cold miss Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
34 lines
1.3 KiB
YAML
34 lines
1.3 KiB
YAML
name: Workflow Lint
|
|
# push is main-only: a push to a PR branch already fires the pull_request run;
|
|
# the unrestricted push trigger double-ran every PR commit.
|
|
on:
|
|
push:
|
|
branches: [main]
|
|
pull_request:
|
|
|
|
# PR-number keyed (run_id fallback for push): a bare branch name carries no
|
|
# fork prefix, so same-name branches from two forks would share one group and
|
|
# cancel each other's runs (same rationale as free-tests.yml).
|
|
concurrency:
|
|
group: actionlint-${{ github.event.pull_request.number || github.run_id }}
|
|
cancel-in-progress: true
|
|
|
|
# Lint needs nothing from the token; the job runs a third-party image with
|
|
# the checkout mounted, so keep the grant read-only and out of .git/config.
|
|
permissions:
|
|
contents: read
|
|
|
|
jobs:
|
|
actionlint:
|
|
runs-on: ubicloud-standard-2
|
|
timeout-minutes: 5
|
|
steps:
|
|
- uses: actions/checkout@v7
|
|
with:
|
|
persist-credentials: false
|
|
# Pull the prebuilt image instead of rhysd/actionlint@v1.7.11 (a Docker
|
|
# action that rebuilt from source every run: 16s of a 44s job for 1s of
|
|
# lint). Pinned by DIGEST: a Docker Hub tag is repointable with no
|
|
# GitHub-side audit trail, and this image sees the mounted checkout.
|
|
- run: docker run --rm -v "$PWD:/repo" -w /repo rhysd/actionlint:1.7.11@sha256:6f03470d0152251d7f07f7c4dc019dbe7024c72cd952f839544c7798843efa8f -color
|