name: CI

on:
  push:
    paths:
      - ".github/workflows/**"
    branches:
      - main
  pull_request:
    paths:
      - ".github/workflows/**"
    branches:
      - main
      - "!v[0-9]*"

permissions:
  contents: read

jobs:
  lint-workflows:
    runs-on: ubuntu-latest

    steps:
      - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0
      # From https://github.com/rhysd/actionlint/blob/main/docs/usage.md#use-actionlint-on-github-actions
      - name: Check workflow files
        run: |
          bash <(curl https://raw.githubusercontent.com/rhysd/actionlint/590d3bd9dde0c91f7a66071d40eb84716526e5a6/scripts/download-actionlint.bash) 1.6.25
          ./actionlint -color -shellcheck=""