name: linter
on:
  push:
    branches: [ master ]
  pull_request:

jobs:
  gitleaks:
    steps:
      - name: Checkout code
        uses: actions/checkout@v4
      - name: Run Gitleaks
        uses: docker://zricethezav/gitleaks:v8.18.4
        with:
          args: detect --no-git --verbose --source ${{ github.workspace }}

  hadolint:
    steps:
      - name: Checkout code
        uses: actions/checkout@v4
      - name: Run hadolint
        uses: docker://pipelinecomponents/hadolint:0.26.4
        with:
          args: hadolint Dockerfile

  shellcheck: # https://github.com/marketplace/actions/shellcheck
    steps:
      - name: Checkout code
        uses: actions/checkout@v4
      - name: Run ShellCheck
        uses: sudo-bot/action-shellcheck@latest
        with:
          cli-args: "shell.sh"