Merge pull request #563 from LedgerHQ/fbe/yamllint_and_codespell

Add yamllint CI and codespell CI

.github/workflows/codeql_checks.yml

@@ -18,9 +18,9 @@ jobs:
     name: Analyse
     strategy:
       matrix:
-        sdk: [ "$NANOS_SDK", "$NANOX_SDK", "$NANOSP_SDK", "$STAX_SDK" ]
-        #'cpp' covers C and C++
-        language: [ 'cpp' ]
+        sdk: ["$NANOS_SDK", "$NANOX_SDK", "$NANOSP_SDK", "$STAX_SDK"]
+        # 'cpp' covers C and C++
+        language: ['cpp']
     runs-on: ubuntu-latest
     container:
       image: ghcr.io/ledgerhq/ledger-app-builder/ledger-app-builder-legacy:latest

.github/workflows/codespell.yml

@@ -0,0 +1,23 @@
+name: Misspelings CI
+
+on:
+  workflow_dispatch:
+  push:
+    branches:
+      - master
+      - main
+      - develop
+  pull_request:
+
+jobs:
+  misspell:
+    name: Check misspellings
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - name: Check misspellings
+        uses: codespell-project/actions-codespell@v2
+        with:
+          builtin: clear,rare
+          check_filenames: true
+          path: src, src_bagl, src_common, src_features, src_nbgl, src_plugin_sdk, src_plugins, doc, client

.github/workflows/lint-workflow.yml

@@ -24,3 +24,10 @@ jobs:
       source: './'
       extensions: 'h,c'
       version: 12
+
+  yamllint:
+    name: Check yaml files
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - run: yamllint .

.github/workflows/python-client.yml

@@ -44,37 +44,37 @@ jobs:
     needs: [lint, mypy]
     steps:
 
-    - name: Clone
-      uses: actions/checkout@v4
-      with:
-        fetch-depth: 0
+      - name: Clone
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
 
-    - name: Build Python package
-      run: |
-        pip install --upgrade pip build twine
-        cd client/
-        python -m build;
-        python -m twine check dist/*
-        pip install .;
-        echo "TAG_VERSION=$(python -c 'from ledger_app_clients.ethereum import __version__; print(__version__)')" >> "$GITHUB_ENV"
+      - name: Build Python package
+        run: |
+          pip install --upgrade pip build twine
+          cd client/
+          python -m build;
+          python -m twine check dist/*
+          pip install .;
+          echo "TAG_VERSION=$(python -c 'from ledger_app_clients.ethereum import __version__; print(__version__)')" >> "$GITHUB_ENV"
 
-    - name: Check version against CHANGELOG
-      if: startsWith(github.ref, 'refs/tags/')
-      run: |
-        CHANGELOG_VERSION=$(grep -Po '(?<=## \[)(\d+\.)+[^\]]' client/CHANGELOG.md | head -n 1)
-        if [ "${{ env.TAG_VERSION }}" == "${CHANGELOG_VERSION}" ];
-        then
-            echo 'Package and CHANGELOG versions match!';
-            exit 0;
-        else
-            echo "Tag '${{ env.TAG_VERSION }}' and CHANGELOG '${CHANGELOG_VERSION}' versions mismatch!";
-            exit 1;
-        fi
+      - name: Check version against CHANGELOG
+        if: startsWith(github.ref, 'refs/tags/')
+        run: |
+          CHANGELOG_VERSION=$(grep -Po '(?<=## \[)(\d+\.)+[^\]]' client/CHANGELOG.md | head -n 1)
+          if [ "${{ env.TAG_VERSION }}" == "${CHANGELOG_VERSION}" ];
+          then
+              echo 'Package and CHANGELOG versions match!';
+              exit 0;
+          else
+              echo "Tag '${{ env.TAG_VERSION }}' and CHANGELOG '${CHANGELOG_VERSION}' versions mismatch!";
+              exit 1;
+          fi
 
-    - name: Publish Python package on pypi.org
-      if: success() && github.event_name == 'push'
-      run: (cd client && python -m twine upload --verbose dist/*)
-      env:
-        TWINE_USERNAME: __token__
-        TWINE_PASSWORD: ${{ secrets.PYPI_PUBLIC_API_TOKEN  }}
-        TWINE_NON_INTERACTIVE: 1
+      - name: Publish Python package on pypi.org
+        if: success() && github.event_name == 'push'
+        run: (cd client && python -m twine upload --verbose dist/*)
+        env:
+          TWINE_USERNAME: __token__
+          TWINE_PASSWORD: ${{ secrets.PYPI_PUBLIC_API_TOKEN  }}
+          TWINE_NON_INTERACTIVE: 1

.yamllint.yml

@@ -0,0 +1,7 @@
+---
+extends: default
+
+rules:
+  document-start: disable
+  line-length: disable
+  truthy: disable