Function jobBlock

scripts/workflow-security.test.mjs:16–24

(jobName, nextJobName)

const awesomeLintJob = workflow.slice(workflow.indexOf("  awesome-lint:"));

function jobBlock(jobName, nextJobName) {
  const start = workflow.indexOf(`  ${jobName}:`);
  const end = workflow.indexOf(`\n  ${nextJobName}:`);

  assert.notEqual(start, -1, `${jobName} job is missing`);
  assert.notEqual(end, -1, `${nextJobName} job is missing`);

  return workflow.slice(start, end);
}

test("repo hygiene workflow grants read-only contents permission", () => {
  assert.match(workflow, /^permissions:\n\s+contents:\s+read\s*$/m);