From bf8cc03bee9cfdaaf63345c8eca1219e450c9ad6 Mon Sep 17 00:00:00 2001
From: Marc Cataford <mcat@riseup.net>
Date: Sat, 27 Jul 2024 09:57:40 -0400
Subject: [PATCH] ci: yaml lint check

---
 .forgejo/workflows/ci.yml |  9 +++++++++
 .yamllint.yml             |  8 ++++++++
 files/gh-dash.yml         | 25 +++++++++++++------------
 playbook.yml              |  6 +++---
 4 files changed, 33 insertions(+), 15 deletions(-)
 create mode 100644 .forgejo/workflows/ci.yml
 create mode 100644 .yamllint.yml

diff --git a/.forgejo/workflows/ci.yml b/.forgejo/workflows/ci.yml
new file mode 100644
index 0000000..5fbd000
--- /dev/null
+++ b/.forgejo/workflows/ci.yml
@@ -0,0 +1,9 @@
+on:
+  push:
+
+jobs:
+  sast:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - run: pipx run yamllint .
diff --git a/.yamllint.yml b/.yamllint.yml
new file mode 100644
index 0000000..a5f2c7b
--- /dev/null
+++ b/.yamllint.yml
@@ -0,0 +1,8 @@
+---
+
+extends: default
+
+rules:
+  line-length:
+    max: 120
+    level: warning
diff --git a/files/gh-dash.yml b/files/gh-dash.yml
index a3c3457..e6ff374 100644
--- a/files/gh-dash.yml
+++ b/files/gh-dash.yml
@@ -1,17 +1,18 @@
+---
 prSections:
-- title: WIP
-  filters: is:open author:@me -org:tophatmonocle
-- title: Needs My Review
-  filters: is:open review-requested:@me -org:tophatmonocle
-- title: Involved
-  filters: is:open involves:@me -author:@me -org:tophatmonocle
+  - title: WIP
+    filters: is:open author:@me -org:tophatmonocle
+  - title: Needs My Review
+    filters: is:open review-requested:@me -org:tophatmonocle
+  - title: Involved
+    filters: is:open involves:@me -author:@me -org:tophatmonocle
 issuesSections:
-- title: My Issues
-  filters: is:open author:@me
-- title: Assigned
-  filters: is:open assignee:@me
-- title: Involved
-  filters: is:open involves:@me -author:@me
+  - title: My Issues
+    filters: is:open author:@me
+  - title: Assigned
+    filters: is:open assignee:@me
+  - title: Involved
+    filters: is:open involves:@me -author:@me
 defaults:
   preview:
     open: true
diff --git a/playbook.yml b/playbook.yml
index db4489a..90b6a4a 100644
--- a/playbook.yml
+++ b/playbook.yml
@@ -4,10 +4,10 @@
 
   tasks:
     - name: Ensure system up-to-date
-      become: yes
+      become: true
       apt:
-        update-cache: yes
-        upgrade: yes
+        update_cache: true
+        upgrade: "yes"
     - name: Install terminal & shell
       apt:
         pkg: