name: Validate actions

# Lint-only workflow: this repo holds reusable composite actions, so there is
# nothing to build — validation via pre-commit is the whole pipeline.

on:
  push:
    branches:
      - main

jobs:
  validate:
    runs-on:
      - linux
      - build
      - amd64
    steps:
      - name: Checkout
        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1

      - name: Run pre-commit hooks
        run: |
          set -euo pipefail
          pre-commit run --all-files --show-diff-on-failure