Four websocket-driver advisories #1737

	name: CI

	on:
	push:
	branches: [ master ]
	pull_request:
	branches: ['**']

	permissions: {}

	jobs:
	lint-actions:
	name: GitHub Actions audit
	runs-on: ubuntu-latest

	steps:
	- uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
	with:
	persist-credentials: false

	- name: Run actionlint
	uses: rhysd/actionlint@914e7df21a07ef503a81201c76d2b11c789d3fca # v1.7.12

	- name: Run zizmor
	uses: zizmorcore/zizmor-action@192e21d79ab29983730a13d1382995c2307fbcaa # v0.5.7
	with:
	advanced-security: false

	tests:
	runs-on: ubuntu-latest
	name: Linter
	steps:
	- uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
	with:
	persist-credentials: false
	- name: Set up Python
	uses: actions/setup-python@ece7cb06caefa5fff74198d8649806c4678c61a1 # v6.3.0
	with:
	python-version: 3.8
	- name: Install yamllint
	run: \|
	python -m pip install --upgrade pip
	pip install yamllint
	- name: Lint YAML files
	run: yamllint gems rubies
	- name: Set up Ruby
	uses: ruby/setup-ruby@0dafeac902942906541bc140009cdbf32665b601 # v1.315.0
	with:
	ruby-version: 4.0
	- name: Install ruby dependencies
	run: bundle install --jobs 4 --retry 3
	- name: Validate YAML
	run: bundle exec rake lint

Provide feedback