secretlint-diff.yml

# Use https://github.com/secretlint/secretlint/pkgs/container/secretlint
---
name: secretlint-diff
on:
  push:
jobs:
  secretlint:
    permissions:
      contents: 'read'
    runs-on: ubuntu-latest
    container:
      image: ghcr.io/secretlint/secretlint:latest
      credentials:
        username: ${{ github.actor }}
        password: ${{ secrets.GITHUB_TOKEN }}
    steps:
      - name: checkout
        uses: actions/checkout@v4
        with:
          # fetch history to get all changed files on push or pull_request event
          fetch-depth: 0
      - name: Get changed files
        id: changed-files
        uses: tj-actions/changed-files@v44
      - name: setup Node ${{ matrix.node-version }}
        uses: actions/setup-node@v4
        with:
          node-version: 20
      - name: Show changed files
        run: echo "${{ steps.changed-files.outputs.all_changed_files }}"
      - name: Run secretlint
        if: steps.changed-files.outputs.any_changed == 'true'
        run: secretlint --config ./secretlintrc.json ${{ steps.changed-files.outputs.all_changed_files }}

concurrency:
  group: ${{ github.workflow }}-${{ github.ref }}
  cancel-in-progress: true