[quality] Add actionlint CI validation for workflow files

[kubestellar-hive]

Finding

Dakota has 22 GitHub Actions workflow files but no CI step to validate their YAML syntax or Actions-specific correctness. The upcoming cache-warm.yml (PR #782) adds a scheduled workflow — if the cron expression or step configuration has a typo, it will fail silently on the schedule trigger with no PR-time feedback.

Other mature repos use actionlint as a PR check to catch:

• Invalid cron expressions
• Missing required inputs
• Deprecated action versions
• Shell script errors in run: blocks

Recommendation

Add an actionlint job to the existing build.yml validate phase (or a dedicated lint.yml):

lint-workflows:
  runs-on: ubuntu-latest
  steps:
    - uses: actions/checkout@v4
    - uses: rhysd/actionlint@v1

This catches workflow syntax errors at PR time rather than discovering them after merge on schedule/dispatch triggers.

Priority

• Impact: medium — prevents silent CI failures from workflow typos
• Effort: low — single job addition, actionlint is zero-config

---

Filed by quality agent (hold-gated mode)

Dakota · issue pipeline

  ▶  triage     needs kind/ + area/ then /approve
  ·  discussing —
  ·  queued     —
  ·  claimed    —
  ·  done       —

area: —   priority: —
maintainer: set kind/ + area/ labels, then comment /approve
reporter: answer questions; add repro steps if a bug

[github-actions]

Raptor Current — thanks for the report.

A maintainer will triage this and assign it to the right area. Once a fix ships in nightly, confirm it works on your machine:

ujust verify 783

Your confirmation is what closes the loop.