name: Workflow Lint
# push is main-only: a push to a PR branch already fires the pull_request run;
# the unrestricted push trigger double-ran every PR commit.
on:
  push:
    branches: [main]
  pull_request:

# Cancel superseded runs for the same branch (matches evals.yml,
# windows-free-tests.yml, etc.). head_ref is set on pull_request; ref_name is
# the fallback for push so a rapid push series doesn't pile up stale lint runs.
concurrency:
  group: actionlint-${{ github.head_ref || github.ref_name }}
  cancel-in-progress: true

jobs:
  actionlint:
    runs-on: ubicloud-standard-2
    steps:
      - uses: actions/checkout@v4
      # Pull the prebuilt image instead of rhysd/actionlint@v1.7.11 (a Docker
      # action that rebuilt from source every run: 16s of a 44s job for 1s of lint).
      - run: docker run --rm -v "$PWD:/repo" -w /repo rhysd/actionlint:1.7.11 -color