validate-codeowners.yml

name: Validate Codeowners
on:
  workflow_dispatch:

  pull_request:

jobs:
  validate-codeowners:
    runs-on: ubuntu-latest
    steps:
      - name: "Checkout source code at current commit"
        uses: actions/checkout@v4

        # Leave pinned at 0.7.1 until https://github.com/mszostok/codeowners-validator/issues/173 is resolved
      - uses: mszostok/codeowners-validator@v0.7.1
        if: github.event.pull_request.head.repo.full_name == github.repository
        name: "Full check of CODEOWNERS"
        with:
          # For now, remove "files" check to allow CODEOWNERS to specify non-existent
          # files so we can use the same CODEOWNERS file for Terraform and non-Terraform repos
          #   checks: "files,syntax,owners,duppatterns"
          checks: "syntax,owners,duppatterns"
          owner_checker_allow_unowned_patterns: "false"
          # GitHub access token is required only if the `owners` check is enabled
          github_access_token: "${{ secrets.PUBLIC_REPO_ACCESS_TOKEN }}"
      - uses: mszostok/codeowners-validator@v0.7.1
        if: github.event.pull_request.head.repo.full_name != github.repository
        name: "Syntax check of CODEOWNERS"
        with:
          checks: "syntax,duppatterns"
          owner_checker_allow_unowned_patterns: "false"