ci: add action-lint workflow (#89)

* ci: add action-lint workflow

* ci: add action-lint check for actions directory

* ci: refactor action-lint workflow and fail on error

* Update .github/workflows/action-lint.yaml

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

* ci: make sure actions directory exists

* Update .github/workflows/action-lint.yaml

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

* ci: add checksum check for reviewdog

* Update .github/workflows/action-lint.yaml

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

* chore: add double quotes for variables

* refactor: build yaml files list and pass to reviewdog as actionlint flags

* chore: double quote parameters

* chore: double quote parameters

* chore: remove quotes

* chore: disable SC2086 shell check for github actions output

* ci: split actionlint to two seperate actions for workflows and actions

* Update .github/workflows/action-lint-actions.yaml

Co-authored-by: Netanel Cohen <34451523+netanelC@users.noreply.github.com>

* Update .github/workflows/action-lint-workflows.yaml

Co-authored-by: Netanel Cohen <34451523+netanelC@users.noreply.github.com>

* ci: run only when updating relevant paths

---------

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
Co-authored-by: Netanel Cohen <34451523+netanelC@users.noreply.github.com>

Author: 3 people

.github/workflows/action-lint-actions.yaml

@@ -0,0 +1,23 @@
+name: reviewdog
+on:
+  pull_request:
+    paths:
+      - "actions/**"
+
+jobs:
+  actionlint-actions:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - name: Build actionlint flags
+        id: build_flags
+        run: |
+          files="$(find actions -type f \( -name 'action.yml' -o -name 'action.yaml' \) | paste -sd' ' -)"
+          # shellcheck disable=SC2086
+          echo "flags=$files" >> $GITHUB_OUTPUT
+      - uses: reviewdog/action-actionlint@a5524e1c19e62881d79c1f1b9b6f09f16356e281 # v1.65.2
+        with:
+          github_token: ${{ secrets.GH_PAT }}
+          reporter: github-pr-review
+          actionlint_flags: ${{ steps.build_flags.outputs.flags }}
+          fail_level: error

.github/workflows/action-lint-workflows.yaml

@@ -0,0 +1,16 @@
+name: reviewdog
+on:
+  pull_request:
+    paths:
+      - ".github/workflows/**"
+
+jobs:
+  actionlint-workflows:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: reviewdog/action-actionlint@a5524e1c19e62881d79c1f1b9b6f09f16356e281 # v1.65.2
+        with:
+          github_token: ${{ secrets.GH_PAT }}
+          reporter: github-pr-review
+          fail_level: error