book000/templates

GitHub Action workflows

actionlint.yml

mkdir -p .github/workflows ; wget -O .github/workflows/actionlint.yml https://raw.githubusercontent.com/book000/templates/master/workflows/actionlint.yml

add-reviewer.yml

mkdir -p .github/workflows ; wget -O .github/workflows/add-reviewer.yml https://raw.githubusercontent.com/book000/templates/master/workflows/add-reviewer.yml

Required	Key	Description	Type	Default
	actors	Target actors (comma separated)	string	dependabot[bot],renovate[bot],github-actions[bot],book000
	reviewers	Reviewers (comma separated)	string	book000

bicep-ci.yml

mkdir -p .github/workflows ; wget -O .github/workflows/bicep-ci.yml https://raw.githubusercontent.com/book000/templates/master/workflows/bicep-ci.yml

Required	Key	Description	Type	Default
	bicep-file	Bicep ファイルのパス	string	infra/main.bicep
	bicepparam-file	Bicep パラメータファイルのパス	string	infra/main.bicepparam

docker.yml

mkdir -p .github/workflows ; wget -O .github/workflows/docker.yml https://raw.githubusercontent.com/book000/templates/master/workflows/docker.yml

Required	Key	Description	Type	Default
	registry	Docker registry	string	ghcr.io
	platforms	Docker platforms	string	linux/amd64,linux/arm64
✔	targets	Docker targets	string
	is-merged	Is merged	boolean	${{ github.event.pull_request.merged == true }}
	is-release	Whether to release	boolean	true
	pr-head-sha	Pull request head SHA	string	${{ github.event.pull_request.head.sha }}
	version	Next custom version (Not included prefix)	string	``
	allow-unsafe-pr-checkout	Allow checking out a fork pull request's head SHA from a pull_request_target-triggered workflow. Only set this to true after the caller workflow has gated it behind a manual review step (e.g. an Environment approval), since this defeats actions/checkout's default pwn-request protection.	boolean	false

hadolint-ci.yml

mkdir -p .github/workflows ; wget -O .github/workflows/hadolint-ci.yml https://raw.githubusercontent.com/book000/templates/master/workflows/hadolint-ci.yml

maven-ci.yml

mkdir -p .github/workflows ; wget -O .github/workflows/maven-ci.yml https://raw.githubusercontent.com/book000/templates/master/workflows/maven-ci.yml

Required	Key	Description	Type	Default
	java-version	Java version	string	17
	jdk-distribution	JDK distribution	string	adopt
	is-merged	Is merged	boolean	${{ github.event.pull_request.merged == true }}
	is-release	Whether to release	boolean	true
	pr-head-sha	Pull request head SHA	string	${{ github.event.pull_request.head.sha }}
	version	Next custom version (Not included prefix)	string	``
	directory	Working directory containing pom.xml	string	.
	allow-unsafe-pr-checkout	Allow checking out a fork pull request's head SHA from a pull_request_target-triggered workflow. Only set this to true after the caller workflow has gated it behind a manual review step (e.g. an Environment approval), since this defeats actions/checkout's default pwn-request protection.	boolean	false

nodejs-ci-pnpm.yml

mkdir -p .github/workflows ; wget -O .github/workflows/nodejs-ci-pnpm.yml https://raw.githubusercontent.com/book000/templates/master/workflows/nodejs-ci-pnpm.yml

Required	Key	Description	Type	Default
	directorys	Target directorys (comma separated)	string	.
	disabled-jobs	Disable Jobs (comma separated)	string	NULL
	install-apt-packages	Install apt packages (space separated)	string	``
	lock-path	Lock file path	string	{dir}/pnpm-lock.yaml
	check-git-diff	Check git diff	boolean	false
	allow-unsafe-pr-checkout	Allow checking out a fork pull request's head SHA from a pull_request_target-triggered workflow. Only set this to true after the caller workflow has gated it behind a manual review step (e.g. an Environment approval), since this defeats actions/checkout's default pwn-request protection.	boolean	false

nodejs-ci.yml

mkdir -p .github/workflows ; wget -O .github/workflows/nodejs-ci.yml https://raw.githubusercontent.com/book000/templates/master/workflows/nodejs-ci.yml

Required	Key	Description	Type	Default
	directorys	Target directorys (comma separated)	string	.
	disabled-jobs	Disable Jobs (comma separated)	string	NULL
	install-apt-packages	Install apt packages (space separated)	string	``
	lock-path	yarn.lock path	string	{dir}/yarn.lock
	check-git-diff	Check git diff	boolean	false
	allow-unsafe-pr-checkout	Allow checking out a fork pull request's head SHA from a pull_request_target-triggered workflow. Only set this to true after the caller workflow has gated it behind a manual review step (e.g. an Environment approval), since this defeats actions/checkout's default pwn-request protection.	boolean	false

Dockerfile

node-app-pnpm.Dockerfile

wget -O Dockerfile https://raw.githubusercontent.com/book000/templates/master/dockerfiles/node-app-pnpm.Dockerfile

node-app-yarn.Dockerfile

wget -O Dockerfile https://raw.githubusercontent.com/book000/templates/master/dockerfiles/node-app-yarn.Dockerfile

node-ncc-app.Dockerfile

wget -O Dockerfile https://raw.githubusercontent.com/book000/templates/master/dockerfiles/node-ncc-app.Dockerfile

php-app.Dockerfile

wget -O Dockerfile https://raw.githubusercontent.com/book000/templates/master/dockerfiles/php-app.Dockerfile

puppeteer-pnpm.Dockerfile

wget -O Dockerfile https://raw.githubusercontent.com/book000/templates/master/dockerfiles/puppeteer-pnpm.Dockerfile

puppeteer-virtual-display-pnpm.Dockerfile

wget -O Dockerfile https://raw.githubusercontent.com/book000/templates/master/dockerfiles/puppeteer-virtual-display-pnpm.Dockerfile

python-app.Dockerfile

wget -O Dockerfile https://raw.githubusercontent.com/book000/templates/master/dockerfiles/python-app.Dockerfile

renovate

Public repo

wget -O renovate.json https://raw.githubusercontent.com/book000/templates/master/renovate/public.json

Private repo

wget -O renovate.json https://raw.githubusercontent.com/book000/templates/master/renovate/private.json