diff --git a/.github/workflows/links.yml b/.github/workflows/links.yml new file mode 100644 index 0000000..2c2f47e --- /dev/null +++ b/.github/workflows/links.yml @@ -0,0 +1,19 @@ +name: Links + +on: + pull_request: + push: + branches: + - main + +permissions: {} + +concurrency: + group: links-${{ github.workflow }}-${{ github.ref }} + cancel-in-progress: true + +jobs: + links: + permissions: + contents: read + uses: putdotio/.github/.github/workflows/frontend-links.yml@1ee0d3b473cbc6fada08831f01ff80fe653c434a # v1.1.0 diff --git a/docs/DISTRIBUTION.md b/docs/DISTRIBUTION.md index 4de2d80..669e39e 100644 --- a/docs/DISTRIBUTION.md +++ b/docs/DISTRIBUTION.md @@ -9,7 +9,7 @@ Merges to `main` are publishable. Links to files outside the tarball are absolute so they resolve for npm consumers. -The release job calls the [shared frontend release workflow](https://github.com/putdotio/.github) from `putdotio/.github`, pinned to a reviewed commit SHA; the semantic-release action and plugin pins live there. [`scan.yml`](https://github.com/putdotio/vref/blob/main/.github/workflows/scan.yml) calls the shared frontend scan workflow from the same repository: Gitleaks, TruffleHog, Actionlint, and Zizmor on pull requests, weekly, and on manual dispatch. +The release job calls the [shared frontend release workflow](https://github.com/putdotio/.github) from `putdotio/.github`, pinned to a reviewed commit SHA; the semantic-release action and plugin pins live there. [`scan.yml`](https://github.com/putdotio/vref/blob/main/.github/workflows/scan.yml) calls the shared frontend scan workflow from the same repository: Gitleaks, TruffleHog, Actionlint, and Zizmor on pull requests, weekly, and on manual dispatch. [`links.yml`](https://github.com/putdotio/vref/blob/main/.github/workflows/links.yml) calls its offline Markdown link and anchor check on pull requests and `main`. Release expectations: