ci: yaml lint check

.forgejo/workflows/ci.yml

@@ -0,0 +1,9 @@
+on:
+  push:
+
+jobs:
+  sast:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - run: pipx run yamllint .

.yamllint.yml

@@ -0,0 +1,8 @@
+---
+
+extends: default
+
+rules:
+  line-length:
+    max: 120
+    level: warning

files/gh-dash.yml

@@ -1,17 +1,18 @@
+---
 prSections:
-- title: WIP
-  filters: is:open author:@me -org:tophatmonocle
-- title: Needs My Review
-  filters: is:open review-requested:@me -org:tophatmonocle
-- title: Involved
-  filters: is:open involves:@me -author:@me -org:tophatmonocle
+  - title: WIP
+    filters: is:open author:@me -org:tophatmonocle
+  - title: Needs My Review
+    filters: is:open review-requested:@me -org:tophatmonocle
+  - title: Involved
+    filters: is:open involves:@me -author:@me -org:tophatmonocle
 issuesSections:
-- title: My Issues
-  filters: is:open author:@me
-- title: Assigned
-  filters: is:open assignee:@me
-- title: Involved
-  filters: is:open involves:@me -author:@me
+  - title: My Issues
+    filters: is:open author:@me
+  - title: Assigned
+    filters: is:open assignee:@me
+  - title: Involved
+    filters: is:open involves:@me -author:@me
 defaults:
   preview:
     open: true

playbook.yml

@@ -4,10 +4,10 @@
 
   tasks:
     - name: Ensure system up-to-date
-      become: yes
+      become: true
       apt:
-        update-cache: yes
-        upgrade: yes
+        update_cache: true
+        upgrade: "yes"
     - name: Install terminal & shell
       apt:
         pkg: