chmeliik/checkton
Runs ShellCheck on Tekton yaml files (and other yaml files, but mainly Tekton)
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Activelast commit Jul 2, 2026
- License
- None
Pinned Snippet
uses: chmeliik/checkton@c24110a11ba3d4acb90964be57fc1177fed2918f # v0.4.0tags can be moved; commit SHAs can't. why a SHA?
Inputs
| name | description | required | default |
|---|---|---|---|
| differential | Report new violations introduced in a Pull Request, ignore existing violations. Set to false to report all violations in all files. | no | true |
| include-regex | Files paths to include (regex pattern). | no | \.ya?ml$ |
| exclude-regex | Files paths to exclude (regex pattern). | no | "" |
| pull-request-base | Hash of the latest commit in the base branch. | no | ${{ github.event.pull_request.base.sha || github.event.merge_group.base_sha }} |
| pull-request-head | Hash of the latest commit in the Pull Request. | no | ${{ github.event.pull_request.head.sha || github.event.merge_group.head_sha }} |
| fail-on-findings | Fail when ShellCheck reports some violations? (May wish to set this to false if you're going to upload the SARIF report anyway. GitHub takes care of the reporting.) | no | true |
| find-renames | Similarity threshold to detect renamed files (see the git-diff manpage). Set to false to disable finding renames. | no | 50% |
| find-copies | Similarity threshold to detect copied files (see the git-diff manpage). Set to false to disable finding copies. | no | 50% |
| find-copies-harder | Inspect unmodified files as candidates for the source of copy. This is a very expensive operation for large projects, so use it with caution. (See the git-diff manpage). | no | false |
| display-style | Display violations in the specified style. Valid values: csgrep, sarif-fmt | no | sarif-fmt |
Outputs
| name | description |
|---|---|
| sarif | Path to the generated SARIF report. |