Files
HealthLog/.github/workflows/no-todo-markers.yml
T
dependabot[bot] 97f34ccde1 chore(deps): bump actions/checkout from 6.0.3 to 7.0.0
Bumps [actions/checkout](https://github.com/actions/checkout) from 6.0.3 to 7.0.0.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/df4cb1c069e1874edd31b4311f1884172cec0e10...9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: 7.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-06-21 15:52:29 +00:00

40 lines
1.3 KiB
YAML

name: No TODO markers
on:
push:
branches: [main, develop]
pull_request:
branches: [main, develop]
permissions:
contents: read
jobs:
# Product code is currently zero TODO / FIXME / XXX / HACK markers and
# the convention is to keep it that way — open a real follow-up issue
# instead of leaving a marker in the source. This gate fails fast if a
# future contributor reintroduces the pattern.
grep:
name: Forbidden marker grep
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
- name: Scan src/ for TODO/FIXME/XXX/HACK markers
run: |
# Tests are exempt — they can legitimately reference an outstanding
# ticket via a TODO; `src/generated/` is third-party output from
# `prisma generate` and is regenerated on every db:generate.
if grep -rEn "\b(TODO|FIXME|XXX|HACK)\b" src/ \
--include='*.ts' \
--include='*.tsx' \
--exclude-dir='__tests__' \
--exclude-dir='generated' \
--exclude='*.test.ts' \
--exclude='*.test.tsx'; then
echo "::error::TODO/FIXME/XXX/HACK markers detected in product code — open a follow-up issue instead."
exit 1
fi
echo "::notice::No forbidden markers in product code."