firejail/.github/workflows/codespell.yml
dependabot[bot] f6b666d9d5 build(deps): bump step-security/harden-runner from 2.13.0 to 2.13.1
Bumps [step-security/harden-runner](https://github.com/step-security/harden-runner) from 2.13.0 to 2.13.1.
- [Release notes](https://github.com/step-security/harden-runner/releases)
- [Commits](ec9f2d5744...f4a75cfd61)

---
updated-dependencies:
- dependency-name: step-security/harden-runner
  dependency-version: 2.13.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-10-01 22:48:14 +00:00

48 lines
1.2 KiB
YAML

# Checks the spelling on all non-third-party files.
name: Codespell
on:
workflow_dispatch:
push:
branches-ignore:
- 'dependabot/**'
paths-ignore:
- 'm4/**'
- COPYING
pull_request:
paths-ignore:
- 'm4/**'
- COPYING
permissions: # added using https://github.com/step-security/secure-workflows
contents: read
jobs:
codespell:
runs-on: ubuntu-24.04
timeout-minutes: 5
steps:
- name: Harden Runner
uses: step-security/harden-runner@f4a75cfd619ee5ce8d5b864b0d183aff3c69b55a
with:
egress-policy: block
allowed-endpoints: >
archive.ubuntu.com:80
azure.archive.ubuntu.com:80
github.com:443
packages.microsoft.com:443
ppa.launchpadcontent.net:443
security.ubuntu.com:80
- uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8
- name: update package information
run: sudo apt-get update -qy
- name: install dependencies
run: sudo apt-get install -qy codespell
- name: print env
run: ./ci/printenv.sh
- name: configure
run: ./configure || (cat config.log; exit 1)
- run: codespell --version
- name: codespell
run: make codespell