Integrate Static Code Analysis Tools #34

	name: Lint and Security Check

	on:
	push:
	pull_request:
	branches:
	- main

	permissions: read-all

	jobs:
	shellcheck:
	name: Lint Shell Scripts with ShellCheck
	runs-on: ubuntu-latest
	steps:
	- name: Check out code
	uses: actions/checkout@v3

	- name: Run ShellCheck
	uses: ludeeus/action-shellcheck@master
	with:
	scandir: './1.1.21.2'

	hadolint:
	name: Lint Dockerfiles with Hadolint
	runs-on: ubuntu-latest
	steps:
	- name: Check out code
	uses: actions/checkout@v3

	- name: Run Hadolint with GitHub Action
	uses: hadolint/[email protected]
	with:
	dockerfile: 1.1.21.2/Dockerfile
	failure-threshold: warning
	override-info: DL3003

	checkov:
	name: Run Checkov for Dockerfile Security Analysis
	runs-on: ubuntu-latest
	steps:
	- name: Check out code
	uses: actions/checkout@v3

	- name: Run Checkov with GitHub Action
	uses: bridgecrewio/checkov-action@master
	with:
	directory: 1.1.21.2/
	quiet: false

Provide feedback