pcolby/Check `run` Scripts

Check your embedded GitHub Actions shell scripts

View on GitHub

Trust Signals

Scorecard Score
not yet scored
Maintenance Recency
Activelast commit Jun 20, 2026
License
MIT

Pinned Snippet

workflow.ymlSHA-pinned
uses: pcolby/check-run-scripts@a6f7bfcb403372676a21f35faa14cb47d9e8502c # v1.1.0

tags can be moved; commit SHAs can't. why a SHA?

namedescriptionrequireddefault
pathsFiles or directories containing workflow/action files to check. If not specified, files under the `./.github/workflows` folder will be checked, otherwise files in the current working directory itself. Paths must be new-line separated. Hint: use YAML's `|-` block scalar syntax.no
check-sourcedEmit warnings in sourced files. Normally, `shellcheck` will only warn about issues in the specified files. With this input set to `true`, any issues in sourced files will also be reported.true
includeComma-separated list of codes to include, for example `SC2016,SC2310`. Defaults to `all`.all
excludeComma-separated list of codes to exclude, for example, `SC2016,SC2310`. Defaults to none.no
external-sourcesFollow source statements even when the file is not specified as input. By default, `shellcheck` will only follow files specified on the command line (plus `/dev/null`). This option allows following any file the script may source.true
external-variablesComma-separated list of variables to assume are defined elsewhere. Useful, for example, if earlier steps create environment variables by writing to `${GITHUB_ENV}`.no
rc-fileShellCheck configuration file to prefer over searching for one in the default locations.no
source-pathAdditional paths to search for sourced files. Paths must be new-line separated. Hint: use YAML's `|-` block scalar syntax.no
shellOverride shell dialect. Valid values are `sh`, `bash`, `dash`, `ksh`, and `busybox`. Defaults to auto-detecting from the action/workflow file/s.no
severityMinimum severity of errors to report. Must be one of the levels supported by `shellcheck`; currently: `error`, `warning`, `info` and `style`. Default is to allow `shellcheck`'s own default, which is currently `style`.no
debugSet to `true` to enable debug output.no

no outputs