ActionLint.yml

# This GitHub Actions workflow is named "ActionLint".
# It is triggered on push events and manually via the workflow_dispatch event.
#
# Permissions:
# - Read access to repository contents.
# - Write access to pull requests.
#
# Jobs:
# - job-1:
#   - Runs on the latest Ubuntu runner.
#   - Steps:
#     - Harden Runner: Uses the step-security/harden-runner action to audit egress policy.
#     - Checkout: Uses the actions/checkout action to check out the repository.
#     - ActionLint: Uses the devops-actions/actionlint action to lint the workflow files.
#       - Continues on error and sets the ID to action-lint.

name: ActionLint
concurrency:
  group: actionlint-${{ github.ref }}
  cancel-in-progress: false
on:
  push:
    paths:
      - ".github/**"
  pull_request:
    paths:
      - ".github/**"
  workflow_dispatch:

permissions:
  contents: read
  pull-requests: write

jobs:
  job-1:
    runs-on: ubuntu-latest
    steps:
      - name: Harden Runner
        uses: step-security/harden-runner@95d9a5deda9de15063e7595e9719c11c38c90ae2 # v2.13.2
        with:
          egress-policy: audit
      - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6.0.0
      - uses: devops-actions/actionlint@467e2ce19b2310e93c9ffa0b50fe31f86b5a7f23 #v0.1.10
        continue-on-error: true
        id: action-lint