🧪Integrate jsonschema into pre-commit framework

.github/workflows/ci.yml

@@ -53,6 +53,7 @@ jobs:
   test:
     name: ${{ matrix.os }} / ${{ matrix.python-version }} / ${{ matrix.pip-version }}
     runs-on: ${{ matrix.os }}-latest
+    timeout-minutes: 9
     strategy:
       fail-fast: false
       matrix:
@@ -183,6 +184,7 @@ jobs:
   pypy:
     name: ${{ matrix.os }} / ${{ matrix.python-version }} / ${{ matrix.pip-version }}
     runs-on: ${{ matrix.os }}-latest
+    timeout-minutes: 9
     strategy:
       fail-fast: false
       matrix:
@@ -287,6 +289,8 @@ jobs:
 
     runs-on: ubuntu-latest
 
+    timeout-minutes: 1
+
     steps:
       - name: Decide whether the needed jobs succeeded or failed
         uses: re-actors/alls-green@afee1c1eac2a506084c274e9c02c8e0687b48d9e

.github/workflows/reusable-qa.yml

@@ -7,6 +7,7 @@ jobs:
   qa:
     name: ${{ matrix.toxenv }}
     runs-on: ubuntu-latest
+    timeout-minutes: 2  # network is slow sometimes
     strategy:
       fail-fast: false
       matrix:

.pre-commit-config.yaml

@@ -13,6 +13,23 @@ repos:
     hooks:
       - id: pyupgrade
         args: [--py38-plus]
+
+  - repo: https://github.com/python-jsonschema/check-jsonschema.git
+    rev: 0.31.1
+    hooks:
+      - id: check-github-actions
+      - id: check-github-workflows
+      - id: check-jsonschema
+        alias: enforce-gha-timeouts
+        name: Check GitHub Workflows set timeout-minutes
+        args:
+          - --builtin-schema
+          - github-workflows-require-timeout
+        files: ^\.github/workflows/[^/]+$
+        types:
+          - yaml
+      # - id: check-readthedocs  # FIXME: demands non-empty `build.tools`
+
   - repo: https://github.com/PyCQA/flake8
     rev: 7.3.0
     hooks:

changelog.d/2273.contrib.md

@@ -0,0 +1,3 @@
+The linting is now set up to perform structured GitHub Actions
+workflows and actions checks against json schemas
+-- by :user:`webknjaz`.