From 73a23a304b9f33b8789f83ea728df4cf0531be9b Mon Sep 17 00:00:00 2001
From: Maru Newby <maru.newby@avalabs.org>
Date: Sat, 13 Jul 2024 11:34:29 -0700
Subject: [PATCH] [ci] Add actionlint job

---
 .github/workflows/hypersdk-ci.yml | 11 +++++++----
 scripts/tests.actionlint.sh       |  7 +++++++
 2 files changed, 14 insertions(+), 4 deletions(-)
 create mode 100755 scripts/tests.actionlint.sh

diff --git a/.github/workflows/hypersdk-ci.yml b/.github/workflows/hypersdk-ci.yml
index 04ec7b3071..fa050ff5ab 100644
--- a/.github/workflows/hypersdk-ci.yml
+++ b/.github/workflows/hypersdk-ci.yml
@@ -53,6 +53,9 @@ jobs:
       - name: Run shellcheck
         shell: bash
         run: scripts/tests.shellcheck.sh
+      - name: Run actionlint
+        shell: bash
+        run: scripts/tests.actionlint.sh
 
   hypersdk-unit-tests:
     runs-on: ubuntu-20.04-32
@@ -87,14 +90,14 @@ jobs:
         id: check_changes
         run: |
           diff=$(git diff --name-only HEAD origin/main)
-          echo "diff:\n$diff\n"
-          output=$(echo $diff | grep -v '^x/programs/' || true)
+          printf "diff:\n%s\n" "$diff"
+          output=$(echo "$diff" | grep -v '^x/programs/' || true)
           if [ -n "$diff" ] && [ -z "$output" ]; then
             echo "only x/programs changed, will skip unafected tests"
-            echo "only_programs_changed=true" >> $GITHUB_OUTPUT
+            echo "only_programs_changed=true" >> "$GITHUB_OUTPUT"
           else
             echo "cannot skip tests"
-            echo "only_programs_changed=false" >> $GITHUB_OUTPUT
+            echo "only_programs_changed=false" >> "$GITHUB_OUTPUT"
           fi
 
   # TokenVM
diff --git a/scripts/tests.actionlint.sh b/scripts/tests.actionlint.sh
new file mode 100755
index 0000000000..bdc3083e6b
--- /dev/null
+++ b/scripts/tests.actionlint.sh
@@ -0,0 +1,7 @@
+#!/usr/bin/env bash
+
+set -euo pipefail
+
+go install github.com/rhysd/actionlint/cmd/actionlint@v1.7.1
+
+actionlint