shellcheck.yml

name: shellcheck

on: [pull_request, push]

concurrency:
  group: ${{ github.workflow }}-${{ github.ref }}
  cancel-in-progress: true

permissions:
  contents: read

jobs:
  shellcheck:
    if: github.event_name != 'pull_request' || github.event.pull_request.head.repo.owner.login != github.event.pull_request.base.repo.owner.login
    runs-on: ubuntu-24.04
    steps:
      - name: Install xz-utils
        run: |
          sudo apt-get -q update
          sudo DEBIAN_FRONTEND=noninteractive apt-get -qq --no-install-recommends install xz-utils
      - uses: actions/checkout@v4
      - name: Download shellcheck
        run: |
          curl -sSfL "$(curl -sSf 'https://api.github.com/repos/koalaman/shellcheck/releases/latest' | mawk -F\" '/"browser_download_url.*\.linux\.x86_64\.tar\.xz"/{print $4;exit}')" -o shellcheck.tar.xz
          tar --wildcards --strip-components=1 -xf shellcheck.tar.xz '*/shellcheck'
          rm shellcheck.tar.xz
      - name: Run shellcheck
        run: |
          mapfile -t FILES < <(find . -not \( -path './.git' -prune \) -type f)  # read all files to array
          for i in "${!FILES[@]}"
          do
              [[ ${FILES[$i]##*/} =~ '.'[^.]*'sh'$ ]] && continue  # file has shell extension
              [[ $(mawk 'NR==1 && $0 ~ /^#!.*sh([[:blank:]]|$)/{print;exit}' "${FILES[$i]}") ]] && continue  # file has shell shebang
              unset -v "FILES[$i]"  # else remove from array
          done
          ./shellcheck -xC -o all -e SC2244,SC2250,SC2312 "${FILES[@]}"