[noctuum]

check-updates.yml, notify-failure.yml and the new validate.yml run only through workflow_call. A packages repository calls them from workflow files of the same names at a pinned commit and passes the four secrets by name. check, prepare, verify and publish check out the calling repository at the workspace root and aurtomator at job.workflow_sha into aurtomator/, and issues checks out only aurtomator. The image job of check-updates.yml and validate.yml checks out the Dockerfile at that SHA and first stops unless the SHA has 40 hex digits. run-as-builder runs the scripts of the checkout that holds it, Setup AUR SSH fails on an empty AUR_SSH_KEY, and notify-failure.yml opens no issue when no job of the run failed. .github/actionlint.yaml ignores the two job.workflow_* properties, which actionlint 1.7.12 does not know (rhysd/actionlint#707).

update-readme.sh writes the badges of the two calling workflows and an automated by aurtomator badge in place of the CI, Codecov, Bash, AUR and License badges, and the README of aurtomator keeps those as plain Markdown. The issue about a newer release names the pin of the calling workflows in place of VERSION. ci.yml calls validate.yml and check-updates.yml of the same commit, the second for pushes and pull requests from this repository, and merge-image waits for both. A fork of aurtomator no longer runs the pipeline on a schedule. bats tests/ --recursive: 1080 pass.

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!