external-dns/.github/workflows/json-yaml-validate.yml
Raffaele Di Fazio 109fd6559f
Pin all GitHub Actions to commit SHAs per Kubernetes policy (#6316)
Pin all uses: references in workflow files to 40-character commit
SHA hashes instead of mutable tags, as required by the Kubernetes
GitHub Actions security policy.

Actions pinned:
- actions/setup-go v6.3.0
- actions/setup-python v6
- actions/checkout v6
- coverallsapp/github-action v2
- github/codeql-action v4
- golangci/golangci-lint-action v9
- GrantBirki/json-yaml-validate v4.0.0
- nosborn/github-action-markdown-cli v3.5.0
- pre-commit/action v3.0.1
- renovatebot/github-action v46.1.4
2026-03-27 20:14:47 +05:30

26 lines
774 B
YAML

name: json-yaml-validate
on:
push:
branches: [ master ]
pull_request:
branches: [ master ]
workflow_dispatch:
permissions:
contents: read
pull-requests: write # enable write permissions for pull requests
jobs:
json-yaml-validate:
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
- name: json-yaml-validate
uses: GrantBirki/json-yaml-validate@9bbaa8474e3af4e91f25eda8ac194fdc30564d96 # v4.0.0
with:
# ref: https://github.com/GrantBirki/json-yaml-validate?tab=readme-ov-file#inputs-
comment: "true" # enable comment mode
yaml_exclude_regex: "(charts/external-dns/templates.*|mkdocs.yml)"
allow_multiple_documents: "true"