fix: harden CI validators

Ports personal-path validator hardening and quoted checkout detection onto current main.
This commit is contained in:
Affaan Mustafa 2026-05-11 03:08:43 -04:00 committed by GitHub
parent 1abc3fb381
commit e674a7dbd7
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
6 changed files with 291 additions and 11 deletions

View file

@ -75,7 +75,7 @@ function extractCheckoutSteps(source) {
startLine: block.startLine,
text: block.lines.join('\n'),
}))
.filter(block => /uses:\s*actions\/checkout@/m.test(block.text));
.filter(block => /uses:\s*['"]?actions\/checkout@/m.test(block.text));
}
function findViolations(filePath, source) {