PR-07: Skill rewrite — CLI-first orchestration (scanner) #12

	name: scanner-lint

	# Path-filtered lint for the DSGAI scanner subproject only, to keep monorepo
	# CI noise down. This is the pattern all later scanner CI follows.
	on:
	push:
	branches: [main]
	paths:
	- 'dsgai_scanner_tool/**'
	- '.github/workflows/scanner-lint.yml'
	pull_request:
	paths:
	- 'dsgai_scanner_tool/**'
	- '.github/workflows/scanner-lint.yml'

	permissions:
	contents: read

	jobs:
	lint:
	runs-on: ubuntu-latest
	steps:
	- name: Checkout
	uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2

	- name: shellcheck integrations shell scripts
	run: \|
	sudo apt-get update -qq && sudo apt-get install -y shellcheck
	# -S warning: report warnings and errors. Known dsgai-secret-scan.sh
	# issues are suppressed inline with TODO(PR-10) markers until PR-10.
	find dsgai_scanner_tool/integrations -name '*.sh' -print0 \
	\| xargs -0 -r shellcheck -S warning

	- name: yamllint scanner YAML
	run: \|
	python -m pip install --quiet yamllint
	yamllint -d "{extends: relaxed, rules: {line-length: disable, document-start: disable, new-lines: disable, truthy: {check-keys: false}}}" \
	dsgai_scanner_tool/

	- name: Markdown link check (scanner docs — relative links + anchors)
	run: \|
	# Deterministic internal-link check: verifies relative file links and
	# in-repo heading anchors resolve. External URLs are intentionally not
	# fetched (flaky in CI); that is a separate concern.
	python dsgai_scanner_tool/scripts/check_md_links.py dsgai_scanner_tool

Navigation Menu