shell.yml

# This workflow checks shell scripts
name: Shell

permissions:
  contents: read

on:
  merge_group:
  pull_request:
    paths:
      - ".github/workflows/shell.yml"
      - "**.sh"
      - "**.bash"
  push:
    paths:
      - ".github/workflows/shell.yml"
      - "**.sh"
      - "**.bash"
    branches:
      - develop
  workflow_dispatch:
    inputs:
      commit_sha:
        description: Git commit sha, on which, to run this workflow

concurrency:
  group: ${{ github.workflow }}-${{ github.ref }}-${{ github.event_name }}
  cancel-in-progress: true

defaults:
  run:
    shell: bash

jobs:
  # shellcheck gives warnings and suggestions for bash/sh shell scripts.
  # https://github.com/koalaman/shellcheck
  lint_shellcheck:
    name: Shell - lint_shellcheck
    runs-on: ubuntu-20.04
    steps:
      - uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608
        with:
          ref: ${{ github.event.inputs.commit_sha }}
      - run: shellcheck -S error $(find . -not -path "./demos/*" -iname "*.sh" -o -name "*.bash")

  # shfmt checks format of shell programs
  # https://github.com/mvdan/sh#shfmt
  lint_shfmt:
    name: Shell - lint_shfmt
    runs-on: ubuntu-20.04
    steps:
      - uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608
        with:
          ref: ${{ github.event.inputs.commit_sha }}

      - name: Install Nix
        uses: ./.github/actions/nix_installer_and_cache
        with:
          cache-unique-id: shell
        id: nix-installer

      - name: Run Shfmt Check
        run:  nix run ./tools/nix#shfmt-all

      - name: Nix Upload Store
        uses: ./.github/actions/nix_upload_store
        if: ${{ steps.nix-installer.outputs.cache-hit != 'true' }}