fix: ensure action runs from GitHub workspace and handle TLS build on musl

Author: itscheems

Dockerfile

@@ -54,12 +54,11 @@ RUN apk add --no-cache ca-certificates
 RUN addgroup -g 1000 appuser && \
     adduser -D -u 1000 -G appuser appuser
 
-WORKDIR /app
-COPY --from=builder /app/target/release/pr-checker /app/pr-checker
+# GitHub Actions workspace is mounted at /github/workspace
+WORKDIR /github/workspace
+COPY --from=builder /app/target/release/pr-checker /usr/local/bin/pr-checker
 
-# Set ownership
-RUN chown -R appuser:appuser /app
 # Switch to non-root user
 USER appuser
 
-ENTRYPOINT ["/app/pr-checker"]
+ENTRYPOINT ["/usr/local/bin/pr-checker"]

pr-checker.yml

@@ -0,0 +1,43 @@
+title:
+  # Regex pattern to match against PR title
+  # Example: Conventional Commits format
+  pattern: "^(feat|fix|docs|chore|refactor|test|style|perf|ci|build|revert):"
+
+  # Minimum length of the title
+  min_length: 10
+
+  # Maximum length of the title (optional)
+  # max_length: 100
+
+# Label validation rules
+labels:
+  # List of required labels
+  # All labels in this list must be present on the PR
+  required:
+    # Type/Kind labels - Required: at least one type label
+    # Common types: bug, feature, enhancement, documentation, refactor, test, chore
+    - "kind/bug" # Bug fixes
+    - "kind/feature" # New features
+    - "kind/docs" # Documentation changes
+    - "kind/enhancement" # Feature enhancements/improvements
+    - "kind/refactor" # Code refactoring
+    - "kind/test" # Adding or updating tests
+    - "kind/chore" # Maintenance tasks (deps, config, etc.)
+    - "kind/ci" # CI/CD changes
+    - "kind/performance" # Performance improvements
+    - "kind/build" # Build system changes
+    - "kind/security" # Security fixes
+    - "kind/dependencies" # Dependency updates
+
+
+    # Priority labels - Optional: uncomment to require priority classification
+    # Common priorities: low, medium, high, critical
+    # - "priority/medium"     # Uncomment to require priority label
+
+    # Area/Component labels - Optional: uncomment to require component classification
+    # Common areas: frontend, backend, api, database, infrastructure, tooling
+    # - "area/backend"        # Uncomment to require area label
+
+    # Size labels - Optional: uncomment to require size estimation
+    # Common sizes: XS, S, M, L, XL (for effort estimation)
+    # - "size/M"              # Uncomment to require size label

.github/pr-checker.yml.example pr-checker.yml.example.github/pr-checker.yml.example renamed to pr-checker.yml.example

@@ -42,4 +42,13 @@ impl Config {
 		let config: Config = serde_yaml::from_str(&content)?;
 		Ok(config)
 	}
+
+	/// Load built-in default config bundled at compile time.
+	pub fn from_default() -> crate::error::Result<Self> {
+		// The default config is stored at repository path `.github/pr-checker.yml`
+		// and embedded via include_str! to make runtime fallback possible.
+		const DEFAULT_CONFIG_STR: &str = include_str!("../../pr-checker.yml");
+		let config: Config = serde_yaml::from_str(DEFAULT_CONFIG_STR)?;
+		Ok(config)
+	}
 }

src/config/schema.rs

@@ -19,7 +19,8 @@ mod github;
 mod rules;
 
 use clap::Parser;
-use tracing::{error, info};
+use std::io::ErrorKind;
+use tracing::{error, info, warn};
 
 #[derive(Parser)]
 #[command(name = "pr-checker")]
@@ -59,6 +60,15 @@ async fn main() {
 		)
 		.init();
 
+	// Ensure we operate in the GitHub workspace when running as an Action
+	if let Ok(ws) = std::env::var("GITHUB_WORKSPACE") {
+		if let Err(e) = std::env::set_current_dir(&ws) {
+			warn!("Failed to set current dir to GITHUB_WORKSPACE={ws}: {e}");
+		} else {
+			info!("Working directory set to GITHUB_WORKSPACE: {}", ws);
+		}
+	}
+
 	let args = Args::parse();
 
 	// Get config path from args or GitHub Actions input or default
@@ -111,9 +121,23 @@ async fn run(config_path: &str) -> error::Result<Vec<rules::Violation>> {
 	info!("Starting PR checker...");
 	info!("Config path: {}", config_path);
 
-	// Load configuration
-	let config = config::Config::from_file(config_path)?;
-	info!("Configuration loaded successfully");
+	// Load configuration, fallback to built-in default if file missing
+	let config = match config::Config::from_file(config_path) {
+		Ok(c) => {
+			info!("Configuration loaded successfully");
+			c
+		}
+		Err(error::Error::Io(ref e)) if e.kind() == ErrorKind::NotFound => {
+			warn!(
+				"Config file not found at '{}', falling back to built-in default",
+				config_path
+			);
+			let cfg = config::Config::from_default()?;
+			info!("Loaded built-in default configuration");
+			cfg
+		}
+		Err(e) => return Err(e),
+	};
 
 	// Initialize GitHub client from environment
 	let client = github::GitHubClient::from_env()?;