Don't stale out good-first-issue #142

	# SPDX-License-Identifier: Apache-2.0

	name: Lint GitHub Actions workflows
	on:
	push:
	branches:
	- "main"
	paths:
	- '.github/workflows/*.ya?ml'
	- '.github/workflows/actionlint.*' # This workflow
	pull_request:
	branches:
	- "main"
	paths:
	- '.github/workflows/*.ya?ml'
	- '.github/workflows/actionlint.*' # This workflow

	env:
	LC_ALL: en_US.UTF-8

	defaults:
	run:
	shell: bash

	permissions:
	contents: read

	jobs:
	actionlint:
	runs-on: ubuntu-latest
	steps:
	- name: "Harden Runner"
	uses: step-security/harden-runner@5c7944e73c4c2a096b17a9cb74d65b6c2bbafbde # v2.9.1
	with:
	egress-policy: audit # TODO: change to 'egress-policy: block' after couple of runs

	- name: "Checkout"
	uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
	with:
	fetch-depth: 0

	- name: "Download actionlint"
	run: \|
	docker build --tag actionlint - < .github/workflows/actionlint.dockerfile

	- name: "Check workflow files"
	run: \|
	echo "::add-matcher::.github/workflows/matchers/actionlint.json"
	docker run --volume="${PWD}:/repo" --workdir=/repo actionlint -color

Provide feedback