Add (or update) GitHub Action (GHA) files and related config.

Author: Potherca

.config/hadolint.yml

@@ -0,0 +1,30 @@
+---
+# For all available rules see: https://github.com/hadolint/hadolint#rules
+ignored:
+  - DL3008  # We do not want to pin versions in apt get install.
+  - DL3018  # We do not want to pin versions in apk add
+
+# For full details see https://github.com/hadolint/hadolint#configure
+#
+# The following keys are available:
+#
+# failure-threshold: string               # name of threshold level (error | warning | info | style | ignore | none)
+# format: string                          # Output format (tty | json | checkstyle | codeclimate | gitlab_codeclimate | gnu | codacy)
+# label-schema:                           # See https://github.com/hadolint/hadolint#linting-labels for details
+#   author: string                        # Your name
+#   contact: string                       # email address
+#   created: timestamp                    # rfc3339 datetime
+#   version: string                       # semver
+#   documentation: string                 # url
+#   git-revision: string                  # hash
+#   license: string                       # spdx
+# no-color: boolean                       # true | false
+# no-fail: boolean                        # true | false
+# override:
+#   error: [string]                       # list of rules
+#   warning: [string]                     # list of rules
+#   info: [string]                        # list of rules
+#   style: [string]                       # list of rules
+# strict-labels: boolean                  # true | false
+# disable-ignore-pragma: boolean          # true | false
+# trustedRegistries: string | [string]    # registry or list of registries

.github/workflows/dockerfile.yml

@@ -7,15 +7,34 @@ on:
   pull_request:
     branches: [ main ]
     paths:
+      - '.config/hadolint.yml'
+      - '.dockerignore'
+      - '.github/workflows/dockerfile.yml'
       - 'Dockerfile'
+      # Docker project specific, Dockerfile "COPY" and "ADD" entries.
+      - 'src/'
+      - 'web/'
+      - 'composer.json'
+      - 'composer.lock'
+      - 'site.conf'
     types: [ opened, reopened, synchronize ]
   # This event occurs when there is a push to the repository.
   push:
     paths:
+      - '.config/hadolint.yml'
+      - '.dockerignore'
+      - '.github/workflows/dockerfile.yml'
       - 'Dockerfile'
+      # Docker project specific, Dockerfile "COPY" and "ADD" entries.
+      - 'src/'
+      - 'web/'
+      - 'composer.json'
+      - 'composer.lock'
+      - 'site.conf'
   # Allow manually triggering the workflow.
   workflow_dispatch:
 
+# Cancels all previous workflow runs for the same branch that have not yet completed.
 concurrency:
   group: ${{ github.workflow }}-${{ github.ref }}
   cancel-in-progress: true
@@ -35,3 +54,5 @@ jobs:
         with:
           args: >-
             hadolint
+            --config .config/hadolint.yml
+            Dockerfile

.github/workflows/json.yml

@@ -8,14 +8,17 @@ on:
     branches: [ main ]
     paths:
       - '**.json'
+      - '.github/workflows/json.yml'
     types: [ opened, reopened, synchronize ]
   # This event occurs when there is a push to the repository.
   push:
     paths:
       - '**.json'
+      - '.github/workflows/json.yml'
   # Allow manually triggering the workflow.
   workflow_dispatch:
 
+# Cancels all previous workflow runs for the same branch that have not yet completed.
 concurrency:
   group: ${{ github.workflow }}-${{ github.ref }}
   cancel-in-progress: true

.github/workflows/markdown.yml

@@ -8,14 +8,17 @@ on:
     branches: [ main ]
     paths:
       - '**.md'
+      - '.github/workflows/markdown.yml'
     types: [ opened, reopened, synchronize ]
   # This event occurs when there is a push to the repository.
   push:
     paths:
       - '**.md'
+      - '.github/workflows/markdown.yml'
   # Allow manually triggering the workflow.
   workflow_dispatch:
 
+# Cancels all previous workflow runs for the same branch that have not yet completed.
 concurrency:
   group: ${{ github.workflow }}-${{ github.ref }}
   cancel-in-progress: true
@@ -37,19 +40,3 @@ jobs:
             remark
             --rc-path=.config/.remarkrc
             --ignore-pattern='*/vendor/*'
-  # 03.quality.markdown.lint-spelling.yml
-  spellcheck-markdown:
-    name: Markdown Spellcheck
-    runs-on: ubuntu-24.04
-    steps:
-      - uses: actions/checkout@v4
-      - uses: docker://pipelinecomponents/markdown-spellcheck
-        with:
-          args: >-
-            mdspell
-            --en-us
-            --ignore-numbers
-            --report
-            '**/*.md'
-            '!**/node_modules/**/*.md'
-            '!**/vendor/**/*.md'

.github/workflows/php.yml

@@ -9,6 +9,7 @@ on:
       - '**.php'
       - '.config/phpcs.xml.dist'
       - '.config/phpunit.xml.dist'
+      - '.github/workflows/php.yml'
       - 'composer.json'
       - 'composer.lock'
     branches: [ main ]
@@ -19,17 +20,14 @@ on:
       - '**.php'
       - '.config/phpcs.xml.dist'
       - '.config/phpunit.xml.dist'
+      - '.github/workflows/php.yml'
       - 'composer.json'
       - 'composer.lock'
   # Allow manually triggering the workflow.
   workflow_dispatch:
-  # Run once the "JSON Quality Assistance" workflow has been completed.
-  workflow_run:
-    workflows: [ "JSON Quality Assistance" ]
-    types:
-      - completed
 
 
+# Cancels all previous workflow runs for the same branch that have not yet completed.
 concurrency:
   group: ${{ github.workflow }}-${{ github.ref }}
   cancel-in-progress: true
@@ -82,7 +80,6 @@ jobs:
             --no-scripts
   # 03.quality.php.lint-version-compatibility.yml
   php-check-version-compatibility:
-    continue-on-error: ${{ matrix.php < '8.1' || matrix.php > '8.4' }}
     name: PHP Version Compatibility
     needs:
       - lint-php-syntax
@@ -91,17 +88,15 @@ jobs:
       fail-fast: false
       matrix:
         php:
-          - 8.0  # from 2020-11 to 2022-11 (2023-11)
-          - 8.1  # from 2021-11 to 2023-11 (2025-12)
-          - 8.2  # from 2022-12 to 2024-12 (2026-12)
-          - 8.3  # from 2023-11 to 2025-12 (2027-12)
-          - 8.4  # from 2024-11 to 2026-12 (2028-12)
-          - 8.5  # from 2025-11 to 2027-12 (2029-12)
+          - '8.0'  # from 2020-11 to 2022-11 (2023-11)
+          - '8.1'  # from 2021-11 to 2023-11 (2025-12)
+          - '8.2'  # from 2022-12 to 2024-12 (2026-12)
+          - '8.3'  # from 2023-11 to 2025-12 (2027-12)
     steps:
       - uses: actions/checkout@v4
       - uses: docker://pipelinecomponents/php-codesniffer
         with:
-          options: >-
+          args: >-
             phpcs
             -s
             --extensions=php

.github/workflows/shell.yml

@@ -1,7 +1,6 @@
 ---
 name: Shell Script Quality Assistance
 
-
 on:
   # This event occurs when there is activity on a pull request. The workflow
   # will be run against the commits, after merge to the target branch (main).
@@ -10,15 +9,18 @@ on:
     paths:
       - '**.bash'
       - '**.sh'
+      - '.github/workflows/shell.yml'
     types: [ opened, reopened, synchronize ]
   # This event occurs when there is a push to the repository.
   push:
     paths:
       - '**.bash'
       - '**.sh'
+      - '.github/workflows/shell.yml'
   # Allow manually triggering the workflow.
   workflow_dispatch:
 
+# Cancels all previous workflow runs for the same branch that have not yet completed.
 concurrency:
   group: ${{ github.workflow }}-${{ github.ref }}
   cancel-in-progress: true
@@ -37,7 +39,9 @@ jobs:
       - run: >-
           find .
           -name '*.sh'
+          -not -name .git
           -print0
+          -type f
           | xargs -0 -P"$(nproc)" -I{} bash -n "{}"
   # 03.quality.shell.lint.yml
   lint-shell-quality:
@@ -49,8 +53,8 @@ jobs:
         with:
           args: >-
             find .
-            \( -name '*.sh' -o -name '*.bash' \)
-            -type f
             -not -name .git
             -print0
+            -name '*.sh'
+            -type f
             | xargs -0 -r -n1 shellcheck

.github/workflows/yaml.yml

@@ -18,6 +18,7 @@ on:
   # Allow manually triggering the workflow.
   workflow_dispatch:
 
+# Cancels all previous workflow runs for the same branch that have not yet completed.
 concurrency:
   group: ${{ github.workflow }}-${{ github.ref }}
   cancel-in-progress: true