sethvargo / ratchet

A tool for securing CI/CD workflows with version pinning.
Apache License 2.0
769 stars 32 forks source link

Custom comment format to be compatible with yamllint and dependabot #89

Closed prein closed 2 months ago

prein commented 2 months ago

New issue?

TL;DR

Current comment format is not compatible with yamllint and dependabot

Detailed design

YAMLlint wants two spaces before comments. Yes, I am aware that I can configure yamllint to want 1 space, but if it's possible to make ratchet comply it would make it easier for me.

I use both ratchet and dependabot. Dependabot supports updating version comments but only selection of formats - see https://github.com/dependabot/dependabot-core/pull/5951/files#diff-fd484a22a8411825b6409071a0d839654c9629162c27b0be71e6abe7b7a8d08bR7-R16
If it was possible to customize the comment format it would save me time and effort

Additional information

Thanks for taking the time to review my requests :)

sethvargo commented 2 months ago

This is a function of the upstream YAML parser and writer that we use. There's no option to control this spacing.