Repo Lint #21

	# This workflow is for various linting tasks that act in bulk over the repository.
	# Scoped linting (i.e. code formatting) should be done in the respective language-specific workflows.
	name: Repo Lint

	permissions: read-all

	on:
	pull_request:
	branches:
	- main
	merge_group:

	jobs:
	markdownlint:
	runs-on: ubuntu-latest

	steps:
	- name: Harden the runner (Audit all outbound calls)
	uses: step-security/harden-runner@a90bcbc6539c36a85cdfeb73f7e2f433735f215b # v2.15.0
	with:
	egress-policy: audit

	- name: check out code
	uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2

	- name: run markdownlint
	uses: DavidAnson/markdownlint-cli2-action@07035fd053f7be764496c0f8d8f9f41f98305101 # v22.0.0
	with:
	globs: \|
	*/.md

	sanity:
	runs-on: ubuntu-latest

	steps:
	- name: check out code
	uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2

	- name: run sanitycheck.py
	run: python3 ./tools/sanitycheck.py

	renovate-config-validation:
	runs-on: ubuntu-latest

	steps:
	- name: check out code
	uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2

	- name: Set up Node.js
	uses: actions/setup-node@6044e13b5dc448c55e2357c09f80417699197238 # v6.2.0
	with:
	node-version: '24'

	- name: Validate Renovate config
	run: npx --yes --package renovate -- renovate-config-validator --strict

	license-header-check:
	runs-on: ubuntu-latest
	steps:
	- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
	- uses: korandoru/hawkeye@c57037afedf940370c41eb660837c8aa928d472a # v6.5.1

Provide feedback