fix: ensure action runs from GitHub workspace and handle TLS build on musl

Author: itscheems

.github/workflows/example.yml

@@ -2,7 +2,7 @@ name: PR Check Example
 
 on:
   pull_request:
-    types: [opened, synchronize, reopened]
+    types: [opened, synchronize, reopened, labeled, unlabeled, edited]
 
 jobs:
   check:
@@ -11,7 +11,7 @@ jobs:
       - uses: actions/checkout@v4
 
       - name: PR Checker
-        uses: ./ # Use local action for testing
+        uses: chenjjiaa/pr-checker@v0.1.0
         with:
           config: .github/pr-checker.yml
         env:

Dockerfile

@@ -54,12 +54,11 @@ RUN apk add --no-cache ca-certificates
 RUN addgroup -g 1000 appuser && \
     adduser -D -u 1000 -G appuser appuser
 
-WORKDIR /app
-COPY --from=builder /app/target/release/pr-checker /app/pr-checker
+# GitHub Actions workspace is mounted at /github/workspace
+WORKDIR /github/workspace
+COPY --from=builder /app/target/release/pr-checker /usr/local/bin/pr-checker
 
-# Set ownership
-RUN chown -R appuser:appuser /app
 # Switch to non-root user
 USER appuser
 
-ENTRYPOINT ["/app/pr-checker"]
+ENTRYPOINT ["/usr/local/bin/pr-checker"]

pr-checker.yml

@@ -0,0 +1,44 @@
+title:
+  # Regex pattern to match against PR title
+  # Example: Conventional Commits format
+  pattern: "^(feat|fix|docs|chore|refactor|test|style|perf|ci|build|revert)(\\([^)]+\\))?:"
+
+  # Minimum length of the title
+  min_length: 10
+
+  # Maximum length of the title (optional)
+  # max_length: 100
+
+# Label validation rules
+labels:
+  # List of required labels
+  # All labels in this list must be present on the PR
+
+  # required:
+  # Type/Kind labels - Required: at least one type label
+  # Common types: bug, feature, enhancement, documentation, refactor, test, chore
+  # - "kind/bug" # Bug fixes
+  # - "kind/feature" # New features
+  # - "kind/docs" # Documentation changes
+  # - "kind/enhancement" # Feature enhancements/improvements
+  # - "kind/refactor" # Code refactoring
+  # - "kind/test" # Adding or updating tests
+  # - "kind/chore" # Maintenance tasks (deps, config, etc.)
+  # - "kind/ci" # CI/CD changes
+  # - "kind/performance" # Performance improvements
+  # - "kind/build" # Build system changes
+  # - "kind/security" # Security fixes
+  # - "kind/dependencies" # Dependency updates
+
+  # Priority labels - Optional: uncomment to require priority classification
+  # Common priorities: low, medium, high, critical
+  # - "priority/medium"     # Uncomment to require priority label
+
+  # Area/Component labels - Optional: uncomment to require component classification
+  # Common areas: frontend, backend, api, database, infrastructure, tooling
+  # - "area/backend"        # Uncomment to require area label
+
+  # Size labels - Optional: uncomment to require size estimation
+  # Common sizes: XS, S, M, L, XL (for effort estimation)
+  # - "size/M"              # Uncomment to require size label
+  required: []

.github/pr-checker.yml.example pr-checker.yml.example.github/pr-checker.yml.example renamed to pr-checker.yml.example

@@ -42,4 +42,13 @@ impl Config {
 		let config: Config = serde_yaml::from_str(&content)?;
 		Ok(config)
 	}
+
+	/// Load built-in default config bundled at compile time.
+	pub fn from_default() -> crate::error::Result<Self> {
+		// The default config is stored at repository path `.github/pr-checker.yml`
+		// and embedded via include_str! to make runtime fallback possible.
+		const DEFAULT_CONFIG_STR: &str = include_str!("../../pr-checker.yml");
+		let config: Config = serde_yaml::from_str(DEFAULT_CONFIG_STR)?;
+		Ok(config)
+	}
 }

src/config/schema.rs

@@ -14,6 +14,7 @@
 
 use crate::config::Config;
 use crate::github::GitHubClient;
+use crate::rules::Violation;
 use crate::rules::{RuleResult, check_labels, check_title};
 
 pub struct Engine {
@@ -43,6 +44,75 @@ impl Engine {
 			all_violations.extend(violations);
 		}
 
+		// Ensure title type aligns with kind/* label (best-effort)
+		if let Some(expected) = expected_label_for_title(&pr.title) {
+			if !has_label(&pr, expected) {
+				all_violations.push(Violation {
+					message: format!(
+						"Title type '{}' requires label '{}', current labels: [{}], title: '{}'",
+						title_type(&pr.title),
+						expected,
+						format_labels(&pr),
+						pr.title
+					),
+				});
+			}
+		}
+
+		// Prepend a context line with title and labels if there are violations
+		if !all_violations.is_empty() {
+			all_violations.insert(
+				0,
+				Violation {
+					message: format!(
+						"Context -> title: '{}'; labels: [{}]",
+						pr.title,
+						format_labels(&pr)
+					),
+				},
+			);
+		}
+
 		Ok(all_violations)
 	}
 }
+
+fn has_label(pr: &crate::github::PullRequest, name: &str) -> bool {
+	pr.labels.iter().any(|l| l.name == name)
+}
+
+fn format_labels(pr: &crate::github::PullRequest) -> String {
+	if pr.labels.is_empty() {
+		"none".to_string()
+	} else {
+		pr.labels
+			.iter()
+			.map(|l| l.name.clone())
+			.collect::<Vec<_>>()
+			.join(", ")
+	}
+}
+
+fn title_type(title: &str) -> String {
+	let prefix = title.split(':').next().unwrap_or_default().trim();
+	// Support optional component scope, e.g., feat(api-server): ...
+	let type_only = prefix.split('(').next().unwrap_or(prefix).trim();
+	type_only.to_lowercase()
+}
+
+fn expected_label_for_title(title: &str) -> Option<&'static str> {
+	match title_type(title).as_str() {
+		"feat" => Some("kind/feature"),
+		"fix" => Some("kind/bug"),
+		"docs" => Some("kind/docs"),
+		"chore" => Some("kind/chore"),
+		"refactor" => Some("kind/refactor"),
+		"test" => Some("kind/test"),
+		"perf" => Some("kind/performance"),
+		"ci" => Some("kind/ci"),
+		"build" => Some("kind/build"),
+		"security" => Some("kind/security"),
+		"dependencies" => Some("kind/dependencies"),
+		_ => None,
+	}
+}

src/engine.rs

@@ -19,7 +19,8 @@ mod github;
 mod rules;
 
 use clap::Parser;
-use tracing::{error, info};
+use std::io::ErrorKind;
+use tracing::{error, info, warn};
 
 #[derive(Parser)]
 #[command(name = "pr-checker")]
@@ -59,6 +60,15 @@ async fn main() {
 		)
 		.init();
 
+	// Ensure we operate in the GitHub workspace when running as an Action
+	if let Ok(ws) = std::env::var("GITHUB_WORKSPACE") {
+		if let Err(e) = std::env::set_current_dir(&ws) {
+			warn!("Failed to set current dir to GITHUB_WORKSPACE={ws}: {e}");
+		} else {
+			info!("Working directory set to GITHUB_WORKSPACE: {}", ws);
+		}
+	}
+
 	let args = Args::parse();
 
 	// Get config path from args or GitHub Actions input or default
@@ -111,9 +121,23 @@ async fn run(config_path: &str) -> error::Result<Vec<rules::Violation>> {
 	info!("Starting PR checker...");
 	info!("Config path: {}", config_path);
 
-	// Load configuration
-	let config = config::Config::from_file(config_path)?;
-	info!("Configuration loaded successfully");
+	// Load configuration, fallback to built-in default if file missing
+	let config = match config::Config::from_file(config_path) {
+		Ok(c) => {
+			info!("Configuration loaded successfully");
+			c
+		}
+		Err(error::Error::Io(ref e)) if e.kind() == ErrorKind::NotFound => {
+			warn!(
+				"Config file not found at '{}', falling back to built-in default",
+				config_path
+			);
+			let cfg = config::Config::from_default()?;
+			info!("Loaded built-in default configuration");
+			cfg
+		}
+		Err(e) => return Err(e),
+	};
 
 	// Initialize GitHub client from environment
 	let client = github::GitHubClient::from_env()?;