diff --git a/.github/workflows/validate.yml b/.github/workflows/validate.yml index 80ecf79f..9b68b61e 100644 --- a/.github/workflows/validate.yml +++ b/.github/workflows/validate.yml @@ -1,15 +1,14 @@ -name: Check package +name: PR validators on: - pull_request: push: - branches: [main] + pull_request: permissions: contents: read jobs: - check: + validate: runs-on: ubuntu-latest steps: - uses: actions/checkout@v4 @@ -22,8 +21,10 @@ jobs: - name: Check package files run: python3 scripts/validate-package.py - name: Check skill discovery - run: npx --yes skills@1.5.20 add . --list + # Pin skill validator version for reproducibility. + # Update by checking https://registry.npmjs.org/skills for latest versions. + run: npx --yes skills@1.5.23 add . --list - name: Check Claude marketplace - run: | - npm install --global @anthropic-ai/claude-code - claude plugin validate . + # Pin @anthropic-ai/claude-code version for reproducible validation. + # Update by checking https://www.npmjs.com/package/@anthropic-ai/claude-code for latest versions. + run: npx --yes @anthropic-ai/claude-code@2.1.263 plugin validate .