Add yamllint

.github/labeler.yml

@@ -1,26 +1,27 @@
 change:
-  - head-branch: ['^change/']
+  - head-branch: ["^change/"]
 
 enhancement:
-  - head-branch: ['^feature/', '^feat/', '^enhancement/', '^enh/']
+  - head-branch: ["^feature/", "^feat/", "^enhancement/", "^enh/"]
 
 bug:
-  - head-branch: ['^fix/', '^bug/']
+  - head-branch: ["^fix/", "^bug/"]
 
 chore:
-  - head-branch: ['^chore/']
+  - head-branch: ["^chore/"]
 
 tests:
-  - head-branch: ['^tests/', '^test/']
+  - head-branch: ["^tests/", "^test/"]
   - changed-files:
-    - any-glob-to-any-file: 'tests/**/*'
+      - any-glob-to-any-file: "tests/**/*"
 
 documentation:
-  - head-branch: ['^docs/', '^doc/']
+  - head-branch: ["^docs/", "^doc/"]
   - changed-files:
-    - any-glob-to-any-file: '**/*.md'
+      - any-glob-to-any-file: "**/*.md"
 
 dependencies:
-  - head-branch: ['^deps/', '^dep/', '^dependabot/', 'pre-commit-ci-update-config']
+  - head-branch:
+      ["^deps/", "^dep/", "^dependabot/", "pre-commit-ci-update-config"]
   - changed-files:
-    - any-glob-to-any-file: ['go.mod', 'go.sum']
+      - any-glob-to-any-file: ["go.mod", "go.sum"]

.github/workflows/lint.yml

@@ -4,9 +4,10 @@ on:
   pull_request:
     branches:
       - main
-    paths-ignore:
-      - "**.md"
-      - "LICENSE"
+
+defaults:
+  run:
+    shell: bash
 
 concurrency:
   group: ${{ github.ref_name }}-lint
@@ -54,3 +55,15 @@ jobs:
           config: .markdownlint-cli2.yaml
           globs: "**/*.md"
           fix: false
+
+  yaml-lint:
+    name: YAML lint
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v3
+
+      - name: Install yamllint
+        run: pip install yamllint
+
+      - name: Lint YAML files
+        run: yamllint .

.github/workflows/scorecard.yml

@@ -1,6 +1,6 @@
 name: OpenSSF Scorecards
 on:
-  branch_protection_rule:
+  branch_protection_rule: # yamllint disable-line rule:empty-values
   schedule:
     - cron: "42 15 * * 6" # run every Saturday at 15:42 UTC
   push:

.yamllint.yaml

@@ -0,0 +1,22 @@
+---
+yaml-files:
+  - "*.yaml"
+  - "*.yml"
+
+ignore-from-file: .gitignore
+
+extends: default
+
+rules:
+  comments:
+    min-spaces-from-content: 1
+  comments-indentation: enable
+  document-start: disable
+  empty-values: enable
+  line-length:
+    max: 120
+    ignore: |
+      .goreleaser.yml
+      .github/
+  truthy:
+    check-keys: false