You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
By default, this action runs all the hooks against all the files. extra_args
lets users specify a single hook id and/or options to pass to pre-commit run.
Here's a sample step configuration that only runs the flake8 hook against all
the files (use the template above except for the pre-commit action):
prior to v3.0.0, this action had custom behaviour which pushed changes back to
the pull request when supplied with a token.
this behaviour was removed:
it required a PAT (didn't work with short-lived GITHUB_TOKEN)
properly hiding this input from the installation and execution of hooks
is intractable in github actions (it is readily available as $INPUT_TOKEN)
this meant potentially unvetted code could access the token via the
environment
you can likely achieve the same thing with an external action such as
git-auto-commit-action though you may want to take precautions to clear git
hooks or other ways that arbitrary code execution can occur when running
git commit / git push (for example core.fsmonitor).
while unrelated to this action, pre-commit.ci avoids these problems by
installing and executing isolated from the short-lived repository-scoped
installation access token.