check-css.yml

name: check css

on:
  workflow_call:
    inputs:
      files:
        type: string
        default: "**/*.css"
      stylelint_config_recess_order_version:
        type: string
        default: "latest"
      stylelint_config_standard_version:
        type: string
        default: "latest"
      stylelint_version:
        type: string
        default: "latest"

jobs:
  lint:
    name: lint
    runs-on: ubuntu-latest
    steps:
      - name: Checkout source code
        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0
        with:
          persist-credentials: false

      - name: Lint CSS files
        env:
          INPUTS_FILES: ${{ inputs.files }}
          INPUTS_STYLELINT_CONFIG_RECESS_ORDER_VERSION: ${{ inputs.stylelint_config_recess_order_version }}
          INPUTS_STYLELINT_CONFIG_STANDARD_VERSION: ${{ inputs.stylelint_config_standard_version }}
          INPUTS_STYLELINT_VERSION: ${{ inputs.stylelint_version }}
        # zizmor: ignore[adhoc-packages] This reusable workflow intentionally installs caller-selected stylelint packages on ephemeral runners.
        run: |
          set -euo pipefail

          if [[ -z "${INPUTS_FILES}" ]]; then
            echo "No CSS files to lint."
            exit 0
          fi

          # Split INPUTS_FILES into an array (space-separated)
          IFS=' ' read -r -a files <<<"$INPUTS_FILES"

          npm install \
            --no-save \
            --no-package-lock \
            --ignore-scripts \
            "stylelint@${INPUTS_STYLELINT_VERSION}" \
            "stylelint-config-recess-order@${INPUTS_STYLELINT_CONFIG_RECESS_ORDER_VERSION}" \
            "stylelint-config-standard@${INPUTS_STYLELINT_CONFIG_STANDARD_VERSION}"

          npx --no-install stylelint -- "${files[@]}"