bitwarden_workflow_linter 0.5.7__tar.gz → 0.7.1__tar.gz

{bitwarden_workflow_linter-0.5.7 → bitwarden_workflow_linter-0.7.1}/.github/CODEOWNERS

@@ -6,3 +6,6 @@
 
 # Default file owners
 * @bitwarden/dept-bre
+
+# App-sec owns default_actions file
+src/bitwarden_workflow_linter/default_actions.json @bitwarden/team-appsec

bitwarden_workflow_linter-0.5.7/.github/workflows/update_actions.yml → bitwarden_workflow_linter-0.7.1/.github/workflows/bwwl_operations.yml

@@ -1,14 +1,30 @@
-name: Update Approved Actions
+name: Approved actions operations
 
 on:
+  workflow_dispatch:
+    inputs:
+      operation:
+        description: 'Operation to perform. ex: update, add'
+        required: true
+        type: string
+      action:
+        description: 'Single action to add. ex: actions/checkout'
+        required: false
+        type: string
   schedule:
-  - cron: '0 0 */14 * *'
+  - cron: '0 0 1 * *'
 
 jobs:
-  actions-update:
-    name: "Update Approved Actions"
+  actions-operation:
+    name: "Approved actions operations"
     runs-on: ubuntu-24.04
+    env:
+      _ACTION: ${{ inputs.action }}
     steps:
+      -  name: Check for action input
+         if: ${{ inputs.operation == 'add' && !env._ACTION }}
+         run: echo "Action input is required for operation 'add'" && exit 1
+
       - name: Login to Azure - CI Subscription
         uses: Azure/login@e15b166166a8746d1a47596803bd8c1b595455cf # v1.6.0
         with:
@@ -22,6 +38,9 @@ jobs:
           secrets: "github-gpg-private-key,
             github-gpg-private-key-passphrase"
 
+      - name: Checkout Branch
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+
       - name: Import GPG key
         uses: crazy-max/ghaction-import-gpg@cb9bde2e2525e640591a934b1fd28eef1dcaf5e5 # v6.2.0
         with:
@@ -35,9 +54,6 @@ jobs:
           git config --local user.email "106330231+bitwarden-devops-bot@users.noreply.github.com"
           git config --local user.name "bitwarden-devops-bot"
 
-      - name: Checkout Branch
-        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
-
       - name: Set up Python 3.11
         uses: actions/setup-python@42375524e23c412d93fb67b49958b491fce71c38 # v5.4.0
         with:
@@ -47,16 +63,30 @@ jobs:
         run: python -m pip install --upgrade bitwarden_workflow_linter
 
       - name: Create Branch
+        if: ${{ github.events_name == 'schedule' }} || ${{ inputs.operation == 'update' }}
         id: create-branch
         run: |
           NAME="update-actions-$(date +'%Y%m%d-%H%M%S')"
           git switch -c $NAME
           echo "name=$NAME" >> $GITHUB_OUTPUT
 
+      - name: Create Branch
+        if: ${{ inputs.operation == 'add' }}
+        id: create-branch
+        run: |
+          NAME= "add-action-$_ACTION"
+          git switch -c $NAME
+          echo "name=$NAME" >> $GITHUB_OUTPUT
+
       - name: Run bwwl update
+        if: ${{ github.events_name == 'schedule' }} || ${{ inputs.operation == 'update' }}
         run: bwwl actions update -o src/bitwarden_workflow_linter/default_actions.json
 
-      - name: Check if there are changes to commit
+      - name: Run bwwl add
+        if: ${{ inputs.operation == 'add' }}
+        run: bwwl actions add -o src/bitwarden_workflow_linter/default_actions.json "$_ACTION"
+
+      - name: Check for changes to commit
         id: new-changes
         run: |
           if [ -n "$(git status --porcelain)" ]; then
@@ -67,15 +97,15 @@ jobs:
           fi
 
       - name: Commit changes
-        if: steps.new-changes.outputs.new_changes == 'TRUE'
+        if: ${{ steps.new-changes.outputs.new_changes == 'TRUE' }}
         env:
-          PR_BRANCH: ${{ steps.create-branch.outputs.name }}
+          _PR_BRANCH: ${{ steps.create-branch.outputs.name }}
         run: |
           git commit -m "Update approved actions" -a
-          git push origin $PR_BRANCH
+          git push origin "$_PR_BRANCH"
 
       - name: Generate GH App token
-        if: steps.new-changes.outputs.new_changes == 'TRUE'
+        if: ${{ steps.new-changes.outputs.new_changes == 'TRUE' }}
         uses: actions/create-github-app-token@67e27a7eb7db372a1c61a7f9bdab8699e9ee57f7 # v1.11.3
         id: app-token
         with:
@@ -84,16 +114,16 @@ jobs:
           owner: ${{ github.repository_owner }}
 
       - name: Create PR
-        if: steps.new-changes.outputs.new_changes == 'TRUE'
+        if: ${{ steps.new-changes.outputs.new_changes == 'TRUE' }}
         id: create-pr
         env:
           GH_TOKEN: ${{ steps.app-token.outputs.token }}
-          PR_BRANCH: ${{ steps.create-branch.outputs.name }}
-          TITLE: "Update bwwl Approved Actions"
+          _PR_BRANCH: ${{ steps.create-branch.outputs.name }}
+          _TITLE: "Update/Add bwwl approved actions"
         run: |
-          PR_URL=$(gh pr create --title "$TITLE" \
+          PR_URL=$(gh pr create --title "$_TITLE" \
             --base "main" \
-            --head "$PR_BRANCH" \
+            --head "$_PR_BRANCH" \
             --label "version:patch" \
             --label "automated pr" \
             --body "
@@ -107,12 +137,3 @@ jobs:
               ## Description
               - This PR updates the approved actions for the Bitwarden Workflow Linter.")
           echo "pr_number=${PR_URL##*/}" >> $GITHUB_OUTPUT
-
-      - name: Approve and Merge PR
-        if: ${{ steps.create-pr.outcome == 'success' }}
-        env:
-          GH_TOKEN: ${{ steps.app-token.outputs.token }}
-          PR_NUMBER: ${{ steps.create-pr.outputs.pr_number }}
-        run: |
-          gh pr review $PR_NUMBER --approve
-          gh pr merge $PR_NUMBER --squash --auto --delete-branch

{bitwarden_workflow_linter-0.5.7 → bitwarden_workflow_linter-0.7.1}/.github/workflows/enforce-labels.yml

@@ -9,7 +9,7 @@ jobs:
     uses: bitwarden/gh-actions/.github/workflows/_enforce-labels.yml@main
 
   enforce-version-label:
-    if: "!(contains(github.event.pull_request.labels.*.name, 'version:major') || contains(github.event.pull_request.labels.*.name, 'version:minor') || contains(github.event.pull_request.labels.*.name, 'version:patch')) || contains(github.event.pull_request.labels.*.name, 'version:skip')"
+    if: "!(contains(github.event.pull_request.labels.*.name, 'version:major') || contains(github.event.pull_request.labels.*.name, 'version:minor') || contains(github.event.pull_request.labels.*.name, 'version:patch') || contains(github.event.pull_request.labels.*.name, 'version:skip'))"
     name: Enforce version label
     runs-on: ubuntu-22.04
 

{bitwarden_workflow_linter-0.5.7 → bitwarden_workflow_linter-0.7.1}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: bitwarden_workflow_linter
-Version: 0.5.7
+Version: 0.7.1
 Summary: Custom GitHub Action Workflow Linter
 Project-URL: Homepage, https://github.com/bitwarden/workflow-linter
 Project-URL: Issues, https://github.com/bitwarden/workflow-linter/issues
@@ -60,12 +60,20 @@ the below and create a `settings.yaml` in the directory that `bwwl` will be runn
 
 ```yaml
 enabled_rules:
-    - bitwarden_workflow_linter.rules.name_exists.RuleNameExists
-    - bitwarden_workflow_linter.rules.name_capitalized.RuleNameCapitalized
-    - bitwarden_workflow_linter.rules.pinned_job_runner.RuleJobRunnerVersionPinned
-    - bitwarden_workflow_linter.rules.job_environment_prefix.RuleJobEnvironmentPrefix
-    - bitwarden_workflow_linter.rules.step_pinned.RuleStepUsesPinned
-    - bitwarden_workflow_linter.rules.underscore_outputs.RuleUnderscoreOutputs
+  - id: bitwarden_workflow_linter.rules.name_exists.RuleNameExists
+    level: error
+  - id: bitwarden_workflow_linter.rules.name_capitalized.RuleNameCapitalized
+    level: error
+  - id: bitwarden_workflow_linter.rules.pinned_job_runner.RuleJobRunnerVersionPinned
+    level: error
+  - id: bitwarden_workflow_linter.rules.job_environment_prefix.RuleJobEnvironmentPrefix
+    level: error
+  - id: bitwarden_workflow_linter.rules.step_pinned.RuleStepUsesPinned
+    level: error
+  - id: bitwarden_workflow_linter.rules.underscore_outputs.RuleUnderscoreOutputs
+    level: warning
+  - id: bitwarden_workflow_linter.rules.run_actionlint.RunActionlint
+    level: warning
 
 approved_actions_path: default_actions.json
 ```
@@ -151,9 +159,9 @@ from ..utils import LintLevels, Settings
 
 
 class RuleJobNameExists(Rule):
-    def __init__(self, settings: Settings = None) -> None:
+    def __init__(self, settings: Settings = None, lint_level: Optional[LintLevels] = LintLevels.ERROR) -> None:
         self.message = "name must exist"
-        self.on_fail: LintLevels = LintLevels.ERROR
+        self.on_fail: LintLevels = lint_level
         self.compatibility: List[Union[Workflow, Job, Step]] = [Job]
         self.settings: Settings = settings
 

{bitwarden_workflow_linter-0.5.7 → bitwarden_workflow_linter-0.7.1}/README.md

@@ -34,12 +34,20 @@ the below and create a `settings.yaml` in the directory that `bwwl` will be runn
 
 ```yaml
 enabled_rules:
-    - bitwarden_workflow_linter.rules.name_exists.RuleNameExists
-    - bitwarden_workflow_linter.rules.name_capitalized.RuleNameCapitalized
-    - bitwarden_workflow_linter.rules.pinned_job_runner.RuleJobRunnerVersionPinned
-    - bitwarden_workflow_linter.rules.job_environment_prefix.RuleJobEnvironmentPrefix
-    - bitwarden_workflow_linter.rules.step_pinned.RuleStepUsesPinned
-    - bitwarden_workflow_linter.rules.underscore_outputs.RuleUnderscoreOutputs
+  - id: bitwarden_workflow_linter.rules.name_exists.RuleNameExists
+    level: error
+  - id: bitwarden_workflow_linter.rules.name_capitalized.RuleNameCapitalized
+    level: error
+  - id: bitwarden_workflow_linter.rules.pinned_job_runner.RuleJobRunnerVersionPinned
+    level: error
+  - id: bitwarden_workflow_linter.rules.job_environment_prefix.RuleJobEnvironmentPrefix
+    level: error
+  - id: bitwarden_workflow_linter.rules.step_pinned.RuleStepUsesPinned
+    level: error
+  - id: bitwarden_workflow_linter.rules.underscore_outputs.RuleUnderscoreOutputs
+    level: warning
+  - id: bitwarden_workflow_linter.rules.run_actionlint.RunActionlint
+    level: warning
 
 approved_actions_path: default_actions.json
 ```
@@ -125,9 +133,9 @@ from ..utils import LintLevels, Settings
 
 
 class RuleJobNameExists(Rule):
-    def __init__(self, settings: Settings = None) -> None:
+    def __init__(self, settings: Settings = None, lint_level: Optional[LintLevels] = LintLevels.ERROR) -> None:
         self.message = "name must exist"
-        self.on_fail: LintLevels = LintLevels.ERROR
+        self.on_fail: LintLevels = lint_level
         self.compatibility: List[Union[Workflow, Job, Step]] = [Job]
         self.settings: Settings = settings
 

bitwarden_workflow_linter-0.7.1/settings.yaml

@@ -0,0 +1,21 @@
+enabled_rules:
+  - id: bitwarden_workflow_linter.rules.name_exists.RuleNameExists
+    level: error
+  - id: bitwarden_workflow_linter.rules.name_capitalized.RuleNameCapitalized
+    level: error
+  - id: bitwarden_workflow_linter.rules.pinned_job_runner.RuleJobRunnerVersionPinned
+    level: error
+  - id: bitwarden_workflow_linter.rules.job_environment_prefix.RuleJobEnvironmentPrefix
+    level: error
+#   - id: bitwarden_workflow_linter.rules.step_approved.RuleStepUsesApproved
+#     level: error
+  - id: bitwarden_workflow_linter.rules.step_pinned.RuleStepUsesPinned
+    level: error
+  - id: bitwarden_workflow_linter.rules.underscore_outputs.RuleUnderscoreOutputs
+    level: warning
+  - id: bitwarden_workflow_linter.rules.run_actionlint.RunActionlint
+    level: warning
+  - id: bitwarden_workflow_linter.rules.check_pr_target.RuleCheckPrTarget
+    level: warning
+
+approved_actions_path: default_actions.json

{bitwarden_workflow_linter-0.5.7 → bitwarden_workflow_linter-0.7.1}/src/bitwarden_workflow_linter/__about__.py

@@ -1,3 +1,3 @@
 """Metadata for Workflow Linter."""
 
-__version__ = "0.5.7"
+__version__ = "0.7.1"

{bitwarden_workflow_linter-0.5.7 → bitwarden_workflow_linter-0.7.1}/src/bitwarden_workflow_linter/default_actions.json

@@ -121,8 +121,8 @@
   },
   "actions/upload-artifact": {
     "name": "actions/upload-artifact",
-    "sha": "b4b15b8c7c6ac21ea08fcf65892d2ee8f75cf882",
-    "version": "v4.4.3"
+    "sha": "65c4c4a1ddee5b72f698fdd19549f0f0fb45cf08",
+    "version": "v4.6.0"
   },
   "actions/upload-pages-artifact": {
     "name": "actions/upload-pages-artifact",
@@ -221,8 +221,8 @@
   },
   "docker/build-push-action": {
     "name": "docker/build-push-action",
-    "sha": "48aba3b46d1b1fec4febb7c5d0c644b249a11355",
-    "version": "v6.10.0"
+    "sha": "67a2d409c0a876cbe6b11854e3e25193efe4e62d",
+    "version": "v6.12.0"
   },
   "docker/login-action": {
     "name": "docker/login-action",
@@ -274,6 +274,11 @@
     "sha": "cc4fc85e6b35bafd578d5ffbc76a5518407e1af0",
     "version": "v4.2.1"
   },
+  "gradle/wrapper-validation-action": {
+    "name": "gradle/wrapper-validation-action",
+    "sha": "f9c9c575b8b21b6485636a91ffecd10e558c62f6",
+    "version": "v3.5.0"
+  },
   "hashicorp/setup-packer": {
     "name": "hashicorp/setup-packer",
     "sha": "1aa358be5cf73883762b302a3a03abd66e75b232",

bitwarden_workflow_linter-0.7.1/src/bitwarden_workflow_linter/default_settings.yaml

@@ -0,0 +1,21 @@
+enabled_rules:
+  - id: bitwarden_workflow_linter.rules.name_exists.RuleNameExists
+    level: error
+  - id: bitwarden_workflow_linter.rules.name_capitalized.RuleNameCapitalized
+    level: error
+  - id: bitwarden_workflow_linter.rules.pinned_job_runner.RuleJobRunnerVersionPinned
+    level: error
+  - id: bitwarden_workflow_linter.rules.job_environment_prefix.RuleJobEnvironmentPrefix
+    level: error
+#   - id: bitwarden_workflow_linter.rules.step_approved.RuleStepUsesApproved
+#     level: error
+  - id: bitwarden_workflow_linter.rules.step_pinned.RuleStepUsesPinned
+    level: error
+  - id: bitwarden_workflow_linter.rules.underscore_outputs.RuleUnderscoreOutputs
+    level: warning
+  - id: bitwarden_workflow_linter.rules.run_actionlint.RunActionlint
+    level: warning
+  - id: bitwarden_workflow_linter.rules.check_pr_target.RuleCheckPrTarget
+    level: warning
+
+approved_actions_path: default_actions.json

{bitwarden_workflow_linter-0.5.7 → bitwarden_workflow_linter-0.7.1}/src/bitwarden_workflow_linter/load.py

@@ -11,7 +11,7 @@ from .models.job import Job
 from .models.step import Step
 from .models.workflow import Workflow
 from .rule import Rule
-from .utils import Settings
+from .utils import Settings, LintLevels
 
 yaml = YAML()
 
@@ -127,13 +127,14 @@ class Rules:
         """
         # [TODO]: data resiliency
         for rule in settings.enabled_rules:
-            module_name = rule.split(".")
+            rule_id = rule["id"]
+            module_name = rule_id.split(".")
             module_name = ".".join(module_name[:-1])
-            rule_name = rule.split(".")[-1]
+            rule_name = rule_id.split(".")[-1]
 
             try:
                 rule_class = getattr(importlib.import_module(module_name), rule_name)
-                rule_inst = rule_class(settings=settings)
+                rule_inst = rule_class(settings=settings, lint_level=lint_level(rule["level"]))
 
                 if Workflow in rule_inst.compatibility:
                     self.workflow.append(rule_inst)
@@ -157,3 +158,21 @@ class Rules:
         for rule in self.step:
             print(f" - {type(rule).__name__}")
         print("========================\n")
+
+
+def lint_level(level: str) -> LintLevels:
+    """Convert a string to a LintLevels enum.
+
+    Args:
+      level:
+        The string representation of the LintLevels enum
+
+    Returns:
+      The LintLevels enum value
+    """
+    if level == "error":
+        return LintLevels.ERROR
+    elif level == "warning":
+        return LintLevels.WARNING
+    else:
+        return LintLevels.NONE

{bitwarden_workflow_linter-0.5.7 → bitwarden_workflow_linter-0.7.1}/src/bitwarden_workflow_linter/rules/check_pr_target.py

@@ -8,25 +8,25 @@ from ..utils import LintLevels, Settings
 
 
 class RuleCheckPrTarget(Rule):
-    def __init__(self, settings: Optional[Settings] = None) -> None:
+    def __init__(self, settings: Optional[Settings] = None, lint_level: Optional[LintLevels] = LintLevels.NONE) -> None:
         """
-        To ensure pull_request_target is safe to use, the check-run step is added 
+        To ensure pull_request_target is safe to use, the check-run step is added
         to all jobs as a dependency.
 
-        Once a branch is pushed to Github, it already opens up a vulnerability 
-        even if the check-run scan fails to detect this. 
-        
-        In order to prevent a vulnerable branch from being used for an attack 
-        prior to being caught through vetting, all pull_request_target workflows 
-        should only be run by users with appropriate permissions.  
+        Once a branch is pushed to Github, it already opens up a vulnerability
+        even if the check-run scan fails to detect this.
+
+        In order to prevent a vulnerable branch from being used for an attack
+        prior to being caught through vetting, all pull_request_target workflows
+        should only be run by users with appropriate permissions.
 
         This greatly reduces the risk as community contributors can't use a fork to run a compromised workflow that uses pull_request_target.
         """
         self.message = "A check-run job must be included as a direct job dependency when pull_request_target is used and the workflow may only apply to runs on the main branch"
-        self.on_fail = LintLevels.WARNING
+        self.on_fail = lint_level
         self.compatibility = [Workflow]
         self.settings = settings
-    
+
     def targets_main_branch(self, obj:Workflow) -> bool:
         if obj.on["pull_request_target"].get("branches"):
             branches_list = obj.on["pull_request_target"].get("branches")
@@ -43,7 +43,7 @@ class RuleCheckPrTarget(Rule):
             if job.uses == "bitwarden/gh-actions/.github/workflows/check-run.yml@main":
                 return True, name
         return False, ""
-    
+
     def check_run_required(self, obj:Workflow, check_job:str) -> list:
         missing_jobs = []
         for job in list(obj.jobs.keys()):

{bitwarden_workflow_linter-0.5.7 → bitwarden_workflow_linter-0.7.1}/src/bitwarden_workflow_linter/rules/job_environment_prefix.py

@@ -22,16 +22,18 @@ class RuleJobEnvironmentPrefix(Rule):
     visible when debugging a shell Step.
     """
 
-    def __init__(self, settings: Optional[Settings] = None) -> None:
+    def __init__(self, settings: Optional[Settings] = None, lint_level: Optional[LintLevels] = LintLevels.NONE) -> None:
         """RuleJobEnvironmentPrefix constructor to override the Rule class.
 
         Args:
           settings:
             A Settings object that contains any default, overridden, or custom settings
             required anywhere in the application.
+          lint_level:
+            The LintLevels enum value to determine the severity of the rule.
         """
         self.message = "Job environment vars should start with an underscore:"
-        self.on_fail = LintLevels.ERROR
+        self.on_fail = lint_level
         self.compatibility = [Job]
         self.settings = settings
 

{bitwarden_workflow_linter-0.5.7 → bitwarden_workflow_linter-0.7.1}/src/bitwarden_workflow_linter/rules/name_capitalized.py

@@ -16,16 +16,18 @@ class RuleNameCapitalized(Rule):
     A simple standard to help keep uniformity in naming.
     """
 
-    def __init__(self, settings: Optional[Settings] = None) -> None:
+    def __init__(self, settings: Optional[Settings] = None, lint_level: Optional[LintLevels] = LintLevels.NONE) -> None:
         """Constructor for RuleNameCapitalized to override the Rule class.
 
         Args:
           settings:
             A Settings object that contains any default, overridden, or custom settings
             required anywhere in the application.
+          lint_level:
+            The LintLevels enum value to determine the severity of the rule.
         """
         self.message = "name must capitalized"
-        self.on_fail = LintLevels.ERROR
+        self.on_fail = lint_level
         self.settings = settings
 
     def fn(self, obj: Union[Workflow, Job, Step]) -> Tuple[bool, str]:

{bitwarden_workflow_linter-0.5.7 → bitwarden_workflow_linter-0.7.1}/src/bitwarden_workflow_linter/rules/name_exists.py

@@ -19,16 +19,18 @@ class RuleNameExists(Rule):
     It also helps with uniformity of runs.
     """
 
-    def __init__(self, settings: Optional[Settings] = None) -> None:
+    def __init__(self, settings: Optional[Settings] = None, lint_level: Optional[LintLevels] = LintLevels.NONE) -> None:
         """Constructor for RuleNameCapitalized to override Rule class.
 
         Args:
           settings:
             A Settings object that contains any default, overridden, or custom settings
             required anywhere in the application.
+          lint_level:
+            The LintLevels enum value to determine the severity of the rule.
         """
         self.message = "name must exist"
-        self.on_fail = LintLevels.ERROR
+        self.on_fail = lint_level
         self.settings = settings
 
     def fn(self, obj: Union[Workflow, Job, Step]) -> Tuple[bool, str]:

{bitwarden_workflow_linter-0.5.7 → bitwarden_workflow_linter-0.7.1}/src/bitwarden_workflow_linter/rules/pinned_job_runner.py

@@ -15,16 +15,18 @@ class RuleJobRunnerVersionPinned(Rule):
     breaking the majority of our pipelines, we pin the versions.
     """
 
-    def __init__(self, settings: Optional[Settings] = None) -> None:
+    def __init__(self, settings: Optional[Settings] = None, lint_level: Optional[LintLevels] = LintLevels.NONE) -> None:
         """Constructor for RuleJobRunnerVersionPinned to override Rule class.
 
         Args:
           settings:
             A Settings object that contains any default, overridden, or custom settings
             required anywhere in the application.
+          lint_level:
+            The LintLevels enum value to determine the severity of the rule.
         """
         self.message = "Workflow runner must be pinned"
-        self.on_fail = LintLevels.ERROR
+        self.on_fail = lint_level
         self.compatibility = [Job]
         self.settings = settings
 

{bitwarden_workflow_linter-0.5.7 → bitwarden_workflow_linter-0.7.1}/src/bitwarden_workflow_linter/rules/run_actionlint.py

@@ -71,9 +71,9 @@ please check your package installer or manually install it",
 class RunActionlint(Rule):
     """Rule to run actionlint as part of workflow linter V2."""
 
-    def __init__(self, settings: Optional[Settings] = None) -> None:
+    def __init__(self, settings: Optional[Settings] = None, lint_level: Optional[LintLevels] = LintLevels.NONE) -> None:
         self.message = "Actionlint must pass without errors"
-        self.on_fail = LintLevels.WARNING
+        self.on_fail = lint_level
         self.compatibility = [Workflow]
         self.settings = settings
 

{bitwarden_workflow_linter-0.5.7 → bitwarden_workflow_linter-0.7.1}/src/bitwarden_workflow_linter/rules/step_approved.py

@@ -15,15 +15,17 @@ class RuleStepUsesApproved(Rule):
     check against.
     """
 
-    def __init__(self, settings: Optional[Settings] = None) -> None:
+    def __init__(self, settings: Optional[Settings] = None, lint_level: Optional[LintLevels] = LintLevels.NONE) -> None:
         """Constructor for RuleStepUsesApproved to override Rule class.
 
         Args:
           settings:
             A Settings object that contains any default, overridden, or custom settings
             required anywhere in the application.
+          lint_level:
+            The LintLevels enum value to determine the severity of the rule.
         """
-        self.on_fail = LintLevels.ERROR
+        self.on_fail = lint_level
         self.compatibility = [Step]
         self.settings = settings
 

{bitwarden_workflow_linter-0.5.7 → bitwarden_workflow_linter-0.7.1}/src/bitwarden_workflow_linter/rules/step_pinned.py

@@ -23,15 +23,17 @@ class RuleStepUsesPinned(Rule):
     updated.
     """
 
-    def __init__(self, settings: Optional[Settings] = None) -> None:
+    def __init__(self, settings: Optional[Settings] = None, lint_level: Optional[LintLevels] = LintLevels.ERROR) -> None:
         """Constructor for RuleStepUsesPinned to override base Rule.
 
         Args:
           settings:
             A Settings object that contains any default, overridden, or custom settings
             required anywhere in the application.
+          lint_level:
+            The LintLevels enum value to determine the severity of the rule.
         """
-        self.on_fail = LintLevels.ERROR
+        self.on_fail = lint_level
         self.compatibility = [Step]
         self.settings = settings
 

{bitwarden_workflow_linter-0.5.7 → bitwarden_workflow_linter-0.7.1}/src/bitwarden_workflow_linter/rules/underscore_outputs.py

@@ -17,16 +17,18 @@ class RuleUnderscoreOutputs(Rule):
     A simple standard to ensure uniformity in naming.
     """
 
-    def __init__(self, settings: Optional[Settings] = None) -> None:
+    def __init__(self, settings: Optional[Settings] = None, lint_level: Optional[LintLevels] = LintLevels.ERROR) -> None:
         """Constructor for RuleUnderscoreOutputs to override the Rule class.
 
         Args:
           settings:
             A Settings object that contains any default, overridden, or custom settings
             required anywhere in the application.
+          lint_level:
+            The LintLevels enum value to determine the severity of the rule.
         """
         self.message = "outputs with more than one word should use an underscore"
-        self.on_fail = LintLevels.WARNING
+        self.on_fail = lint_level
         self.compatibility = [Workflow, Job, Step]
         self.settings = settings
 

{bitwarden_workflow_linter-0.5.7 → bitwarden_workflow_linter-0.7.1}/src/bitwarden_workflow_linter/utils.py

@@ -111,12 +111,12 @@ SettingsFromFactory = TypeVar("SettingsFromFactory", bound="Settings")
 class Settings:
     """Class that contains configuration-as-code for any portion of the app."""
 
-    enabled_rules: list[str]
+    enabled_rules: list[dict[str, str]]
     approved_actions: dict[str, Action]
 
     def __init__(
         self,
-        enabled_rules: Optional[list[str]] = None,
+        enabled_rules: Optional[list[dict[str, str]]] = None,
         approved_actions: Optional[dict[str, dict[str, str]]] = None,
     ) -> None:
         """Settings object that can be overridden in settings.py.

bitwarden_workflow_linter-0.5.7/settings.yaml

@@ -1,12 +0,0 @@
-enabled_rules:
-  - bitwarden_workflow_linter.rules.name_exists.RuleNameExists
-  - bitwarden_workflow_linter.rules.name_capitalized.RuleNameCapitalized
-  - bitwarden_workflow_linter.rules.pinned_job_runner.RuleJobRunnerVersionPinned
-  - bitwarden_workflow_linter.rules.job_environment_prefix.RuleJobEnvironmentPrefix
-#   - bitwarden_workflow_linter.rules.step_approved.RuleStepUsesApproved
-  - bitwarden_workflow_linter.rules.step_pinned.RuleStepUsesPinned
-  - bitwarden_workflow_linter.rules.underscore_outputs.RuleUnderscoreOutputs
-  - bitwarden_workflow_linter.rules.run_actionlint.RunActionlint
-  - bitwarden_workflow_linter.rules.check_pr_target.RuleCheckPrTarget
-
-approved_actions_path: default_actions.json

bitwarden_workflow_linter-0.5.7/src/bitwarden_workflow_linter/default_settings.yaml

@@ -1,12 +0,0 @@
-enabled_rules:
-  - bitwarden_workflow_linter.rules.name_exists.RuleNameExists
-  - bitwarden_workflow_linter.rules.name_capitalized.RuleNameCapitalized
-  - bitwarden_workflow_linter.rules.pinned_job_runner.RuleJobRunnerVersionPinned
-  - bitwarden_workflow_linter.rules.job_environment_prefix.RuleJobEnvironmentPrefix
-#   - bitwarden_workflow_linter.rules.step_approved.RuleStepUsesApproved
-  - bitwarden_workflow_linter.rules.step_pinned.RuleStepUsesPinned
-  - bitwarden_workflow_linter.rules.underscore_outputs.RuleUnderscoreOutputs
-  - bitwarden_workflow_linter.rules.run_actionlint.RunActionlint
-  - bitwarden_workflow_linter.rules.check_pr_target.RuleCheckPrTarget
-
-approved_actions_path: default_actions.json