add yaml-linter

Author: kringkaste

.ansible-lint

@@ -1,3 +1,4 @@
+---
 exclude_paths:
   - .github/
 skip_list:

.github/dependabot.yaml

@@ -0,0 +1,12 @@
+---
+version: 2
+updates:
+
+    # Maintain dependencies for GitHub Actions
+    - package-ecosystem: "github-actions"
+      directory: "/"
+      schedule:
+          interval: "weekly"
+          day: "monday"
+          time: "08:00"
+          timezone: "Europe/Berlin"

.github/workflows/test.yaml

@@ -1,7 +1,7 @@
+---
 name: Validate
 
-on:
-  - push
+on: [push] # yamllint disable-line rule:truthy
 
 jobs:
   validate:
@@ -16,10 +16,10 @@ jobs:
         with:
           version: "latest"
 
-      - name: Init base image 
+      - name: Init base image
         run: "packer init baseimage.pkr.hcl"
 
-      - name: Init webserver image 
+      - name: Init webserver image
         run: "packer init webserver.pkr.hcl"
 
       - name: Validate base image
@@ -28,5 +28,8 @@ jobs:
       - name: Validate packer configuration
         run: "packer validate webserver.pkr.hcl"
 
+      - name: Validate YAML
+        uses: ibiqlik/action-yamllint@v3
+
       - name: Validate ansible playbooks
         uses: ansible/ansible-lint-action@main

.yamllint

@@ -0,0 +1,19 @@
+---
+ignore: |
+  roles/prometheus/files/generator.yml
+  roles/*/templates/*
+
+extends: default
+
+rules:
+  comments:
+    min-spaces-from-content: 1
+  comments-indentation: false
+  line-length:
+    max: 120
+  braces:
+    min-spaces-inside: 0
+    max-spaces-inside: 1
+  octal-values:
+    forbid-implicit-octal: true
+    forbid-explicit-octal: true

Makefile

@@ -5,6 +5,7 @@ init:
 test: init
 	packer validate baseimage.pkr.hcl
 	packer validate webserver.pkr.hcl
+	yamllint .
 	ansible-lint
 
 build: test

roles/php/tasks/main.yaml

@@ -13,7 +13,7 @@
 
 - name: Add ondrej php repo
   ansible.builtin.apt_repository:
-    repo: deb [signed-by=/usr/share/keyrings/deb.sury.org-php.gpg] https://packages.sury.org/php/ {{ ansible_distribution_release }} main
+    repo: deb [signed-by=/usr/share/keyrings/deb.sury.org-php.gpg] https://packages.sury.org/php/ {{ ansible_distribution_release }} main # yamllint disable-line rule:line-length
 
 - name: "Install packages for php {{ php_version }}"
   ansible.builtin.apt:

shell.nix

@@ -7,6 +7,7 @@ pkgs.mkShell {
     python311
     python311Packages.pip
     jq
+    yamllint
   ];
   shellHook = ''
     packer init baseimage.pkr.hcl