lint.yml

---
name: Lint yaml
on: push

jobs:
   run-kube-linter:
     runs-on: ubuntu-latest
     steps:
      - name: Checkout code
        uses: actions/checkout@v4

       # This prepares directory where github/codeql-action/upload-sarif@v1 looks up report files by default.
      - name: Create ../results directory for SARIF report files
        shell: bash
        run: mkdir -p ../results

      - name: Scan repo with kube-linter
        uses: stackrox/kube-linter-action@v1.0.4
        with:
          directory: .
          format: sarif
          output-file: ../results/kube-linter.sarif
        continue-on-error: true

      - name: Upload SARIF report files to GitHub
        uses: github/codeql-action/upload-sarif@v3


      # When we are ready to fail builds. Enable the following

#      # Ensure the workflow eventually fails if files did not pass kube-linter checks.
#      - name: Verify kube-linter-action succeeded
#        shell: bash
#        run: |
#          echo "If this step fails, kube-linter found issues. Check the output of the scan step above."
#          [[ "${{ steps.kube-linter-action-scan.outcome }}" == "success" ]]