setup ci

.github/workflows/actionlint.yaml

@@ -0,0 +1,27 @@
+# Copyright 2023 Chainguard, Inc.
+# SPDX-License-Identifier: Apache-2.0
+
+name: ActionLint
+
+on:
+  pull_request:
+    branches:
+      - 'main'
+
+jobs:
+
+  action-lint:
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Check out code
+        uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4.1.0
+
+      - id: get_yamls
+        run: |
+          yamls=$(find . -name "*.yaml" -iname '.chainguard/source.yaml')
+          echo "files="${yamls}"" >> $GITHUB_OUTPUT
+
+      - uses: reviewdog/action-actionlint@v1
+        with:
+          actionlint_flags: ${{ steps.get_yamls.outputs.files }}

.github/workflows/test.yaml

@@ -0,0 +1,33 @@
+# Copyright 2023 Chainguard, Inc.
+# SPDX-License-Identifier: Apache-2.0
+
+name: Test
+
+on:
+  pull_request:
+    branches:
+      - 'main'
+
+jobs:
+
+  test:
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Check out code
+        uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4.1.0
+
+      - name: Run Digestabot
+        uses: ./
+        with:
+          create-pr: false
+
+      - name: Check changes
+        run: |
+          if [[ $(git diff --stat) == '' ]]; then
+            echo 'should exist changes'
+            exit 1
+          else
+            exit 0
+          fi
+        shell: bash

testdata/Dockerfile

@@ -0,0 +1,4 @@
+# Copyright 2023 Chainguard, Inc.
+# SPDX-License-Identifier: Apache-2.0
+
+FROM cgr.dev/chainguard/static@sha256:a8aeacbaf0a1176ab5dbcf9b73a517665d8db5e1495ba97d64c73b3821deb0d8

testdata/k8s-job.yaml

@@ -0,0 +1,19 @@
+# Copyright 2023 Chainguard, Inc.
+# SPDX-License-Identifier: Apache-2.0
+
+apiVersion: batch/v1
+kind: Job
+metadata:
+  namespace: test
+  name: test
+spec:
+  backoffLimit: 25
+  template:
+    metadata:
+      annotations:
+    spec:
+      restartPolicy: Never
+      - name: cosign
+        image: cgr.dev/chainguard/static@sha256:a8aeacbaf0a1176ab5dbcf9b73a517665d8db5e1495ba97d64c73b3821deb0d8
+        command: ["/bin/sh", "-c"]
+