Add a reusable PHPStan workflow and the canonical pre-push hook, PG-4897 - #44

Merged

chippison merged 12 commits into

mainfrom

PG-4897-shared-phpstan

Aug 12, 2026

Commits on Aug 4, 2026

Add a reusable PHPStan workflow and the canonical pre-push hook, PG-4897
snake14
committed
f3106a7
Pin setup-php to a commit hash
snake14
committed
e13a0ca
Analyse the commits supplied on the hook's stdin rather than HEAD
snake14
committed
2d627d4
Pass the plugin name to the shell via env rather than template interpolation
snake14
committed
d47d60d
Validate dependent plugin names before touching plugins/<name>
snake14
committed
df4c692
Validate the plugin name and pass TARGET_BRANCH to the dependent-plugin checkout
snake14
committed
5d1a9c1
Lock helper scripts to the workflow's own commit and skip the hook outside plugins/
snake14
committed
6e94c9c
Pin all actions to commit SHAs
snake14
committed
6ba41cb
Recommend full commit SHAs for pinning; tags are not immutable
snake14
committed
2576430
Reduce the callee permissions to contents: read; smoke-test debug step [temp]
snake14
committed
476ccdc
Let callers pin the helper scripts via scripts-ref
snake14
committed
e2f08bc
Accept both documented dependent-plugin slug forms
snake14
committed
879d0ba