Plugin Directory: Consume security scan callbacks exactly once. #245

	name: Static Analysis (PHP Linting)

	on:
	pull_request:
	paths:
	- '**.php'
	- phpcs.xml.dist
	- composer.json
	- .github/workflows/phpcs.yml
	- .github/bin/phpcs-branch.php
	push:
	branches: [trunk]
	paths:
	- '**.php'

	# Cancel superseded PR runs; trunk pushes get per-commit groups so queued mirrored commits aren't cancelled.
	concurrency:
	group: ${{ github.workflow }}-${{ github.ref }}-${{ github.event_name == 'push' && github.sha \|\| '' }}
	cancel-in-progress: true

	jobs:
	phpcs:
	name: PHP Coding Standards
	runs-on: ubuntu-latest

	steps:
	- uses: actions/checkout@v7
	with:
	fetch-depth: 0

	- name: Set up PHP
	uses: shivammathur/setup-php@v2
	with:
	php-version: '8.4'
	coverage: none
	tools: composer:v2
	env:
	COMPOSER_TOKEN: ${{ secrets.GITHUB_TOKEN }}

	- name: Cache Composer dependencies
	uses: actions/cache@v6
	with:
	path: vendor
	key: ${{ runner.os }}-composer-${{ hashFiles('composer.lock') }}

	- name: Install Composer dependencies
	run: composer install --no-interaction --prefer-dist

	- name: Lint PHP
	run: BASE_REF=${{ github.base_ref }} php .github/bin/phpcs-branch.php

Navigation Menu