bash-ci.yml

name: bash-ci (reusable)

on:
  workflow_call:
    inputs:
      shellcheck-paths:
        description: 'Space-separated paths for shellcheck. Default: every tracked .sh file.'
        required: false
        type: string
        default: ''
      shellcheck-severity:
        description: 'Shellcheck severity threshold (error|warning|info|style).'
        required: false
        type: string
        default: 'warning'
      test-command:
        description: 'Optional test command (e.g. ./_tests/run_tests.sh). Empty = skip.'
        required: false
        type: string
        default: ''
      runs-on:
        description: 'Runner image. Default ubuntu-latest.'
        required: false
        type: string
        default: 'ubuntu-latest'

jobs:
  bash-quality:
    runs-on: ${{ inputs.runs-on }}
    steps:
      - uses: actions/checkout@v4

      - name: Install CLI tools via mise (track-latest)
        uses: jdx/mise-action@1648a7812b9aeae629881980618f079932869151 # v4.0.1
        with:
          cache: ${{ github.event_name != 'schedule' }}
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

      - name: Bash syntax check
        shell: bash
        run: |
          set -e
          targets="${{ inputs.shellcheck-paths }}"
          if [[ -z "$targets" ]]; then
            targets="$(git ls-files '*.sh' '*.bash')"
          fi
          for f in $targets; do
            bash -n "$f"
          done

      - name: ShellCheck
        shell: bash
        run: |
          set -e
          targets="${{ inputs.shellcheck-paths }}"
          if [[ -z "$targets" ]]; then
            targets="$(git ls-files '*.sh' '*.bash')"
          fi
          shellcheck -S "${{ inputs.shellcheck-severity }}" $targets

      - name: Test
        if: ${{ inputs.test-command != '' }}
        shell: bash
        run: ${{ inputs.test-command }}