no-cheat.yml

name: no-cheat

on:
  pull_request:
    types: [opened, synchronize]
  merge_group:
    types: [checks_requested]
  push:
    # required for merge queue to work. jobs.integration.if will mark it as skipped
    branches:
      - main

permissions:
  contents: read

jobs:
  no-pylint-disable:
    runs-on:
      group: databrickslabs-protected-runner-group
      labels: linux-ubuntu-latest
    if: github.event_name == 'pull_request' && (github.event.action == 'opened' || github.event.action == 'synchronize')
    steps:
      - name: Checkout
        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd  # v6.0.2
        with:
          fetch-depth: 0

      - name: Verify no additional disabled lint in the new code
        run: |
          git fetch origin $GITHUB_BASE_REF:$GITHUB_BASE_REF
          git diff $GITHUB_BASE_REF...$(git branch --show-current) >> diff_data.txt
          python tests/unit/no_cheat.py diff_data.txt >> cheats.txt
          COUNT=$(cat cheats.txt | wc -c)
          if [ ${COUNT} -gt 1 ]; then
            cat cheats.txt
            exit 1
          fi