debian-forge-cli/.github/workflows/check-spec.yaml
dependabot[bot] ecbf9f65c7 build(deps): bump actions/checkout from 3 to 5
Bumps [actions/checkout](https://github.com/actions/checkout) from 3 to 5.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v3...v5)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: '5'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-08-18 21:41:32 +00:00

35 lines
966 B
YAML

name: SPEC file check
on: # yamllint disable-line rule:truthy
pull_request:
branches:
- "*"
push:
branches:
- main
jobs:
check-spec-images-deps:
name: "🔍 Check spec file osbuild/images dependencies"
runs-on: ubuntu-latest
container: registry.fedoraproject.org/fedora:latest
env:
# workaround for expired cert at source of indirect dependency
# (go.opencensus.io/trace)
GOPROXY: "https://proxy.golang.org,direct"
steps:
- name: Checkout
uses: actions/checkout@v5
- name: Install dependencies
shell: bash
run: |
# we have the same build-deps as the images library
curl -sL https://raw.githubusercontent.com/osbuild/images/refs/heads/main/test/scripts/install-dependencies | bash
- name: Vendor dependencies
run: go mod vendor
- name: Check dependencies in spec file
uses: osbuild/images@check-spec-deps-action