Merge pull request #17 from thistletech/syncom/gha-update-dependencies

GHA: update actions

.github/workflows/sanity.yml

@@ -0,0 +1,65 @@
+name: 'Sanity Checks'
+
+on:
+  push:
+    branches:
+    - 'main'
+  pull_request:
+    branches:
+    - 'main'
+
+jobs:
+  # markdownlint: https://github.com/markdownlint/markdownlint
+  mdl:
+    name: 'markdownlint'
+    strategy:
+      fail-fast: false
+      matrix:
+        os: [ubuntu-latest]
+    runs-on: ${{ matrix.os }}
+    steps:
+      - name: 'Checkout repository'
+        uses: actions/checkout@v4.1.1
+      - name: "Install Ruby"
+        # v1.172.0
+        uses: ruby/setup-ruby@d4526a55538b775af234ba4af27118ed6f8f6677
+        with:
+          ruby-version: '3.3'
+          bundler-cache: true
+      - name: 'Install mdl'
+        run: gem install mdl
+      - name: 'Run mdl'
+        run: |
+          set -euxo pipefail
+          cd ${{ github.workspace }}/
+          mdl --version
+          for f in $(find . \( -path ./.git -o -path ./bin -o -path ./.github \) -prune -o -type f -name "*.md" -print); do
+            mdl "$f"
+          done
+
+  shellcheck:
+    name: "shellcheck"
+    strategy:
+      fail-fast: false
+      # Run on Linux
+      matrix:
+        os: [ubuntu-latest]
+    runs-on: ${{ matrix.os }}
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4.1.1
+      - name: Install shellcheck on Ubuntu
+        run: |
+          sudo apt update
+          sudo apt install shellcheck -y
+
+      - name: Run shellcheck
+        run: |
+          set -euxo pipefail
+          cd ${{ github.workspace }}/
+          shellcheck --version
+          for f in $(find . \( -path ./.git -o -path ./bin \) -prune -o -type f -print); do
+            if file "$f" | grep "shell script" &>/dev/null; then
+              shellcheck -x "$f"
+            fi
+          done

CODEOWNERS

@@ -1,2 +1,2 @@
 # See https://help.github.com/articles/about-codeowners/
-* @syncom @pldubouilh @russellchapin
+* @syncom @pldubouilh @russellchapin @wmagda

README.md

@@ -1,7 +1,6 @@
 # trh-k: Thistle Release Helper with KMS Signing
 
-[![Shellcheck](https://github.com/thistletech/trh-k/actions/workflows/shellcheck.yml/badge.svg)](https://github.com/thistletech/trh-k/actions/workflows/shellcheck.yml)
-[![Markdown Lint](https://github.com/thistletech/trh-k/actions/workflows/markdownlint.yml/badge.svg)](https://github.com/thistletech/trh-k/actions/workflows/markdownlint.yml)
+[![Sanity checks](https://github.com/thistletech/trh-k/actions/workflows/sanity.yml/badge.svg)](https://github.com/thistletech/trh-k/actions/workflows/sanity.yml)
 
 This repository contains the tools and instructions for releasing a Thistle OTA
 update bundle signed with a key managed in a Cloud KMS (key management system).