ci(lint): add workflow and taskfiles

.devcontainer/devcontainer.json

@@ -6,32 +6,62 @@
     "ghcr.io/devcontainers/features/common-utils:2": {
       "configureZshAsDefaultShell": false
     },
-    "ghcr.io/devcontainers/features/azure-cli:1": {
-      "version": "2.82.0",
-      "installBicep": true
+    "ghcr.io/eitsupi/devcontainer-features/jq-likes:2": {
+      // ? move to Taskfile?
+      "jqVersion": "latest",
+      "yqVersion": "latest",
+      "gojqVersion": "latest",
+      "jaqVersion": "latest"
     },
-    "ghcr.io/devcontainers/features/terraform:1": {
-      "version": "1.10.4"
-    },
-    "ghcr.io/devcontainers/features/go:1": {
-      "version": "1.25.5"
-    },
-    "ghcr.io/devcontainers/features/powershell:1": {},
     "ghcr.io/eitsupi/devcontainer-features/go-task:1": {}
   },
   "workspaceMount": "source=${localWorkspaceFolder},target=${containerWorkspaceFolder},type=bind,consistency=cached",
   "workspaceFolder": "/workspace",
   "remoteEnv": {
     "LOCAL_WORKSPACE_FOLDER": "${localWorkspaceFolder}"
   },
+  "onCreateCommand": {
+    "init": "task init"
+  },
   "postCreateCommand": {
     "git-safe-dir": "git config --global --add safe.directory ${containerWorkspaceFolder}"
   },
   "customizations": {
     "vscode": {
+      "settings": {
+        "terminal.integrated.defaultProfile.linux": "bash",
+        "terminal.integrated.defaultProfile.osx": "zsh",
+        "terminal.integrated.defaultProfile.windows": "PowerShell",
+        "powershell.powerShellAdditionalExePaths": {
+          "pwsh": "/usr/bin/pwsh"
+        },
+        "powershell.powerShellDefaultVersion": "pwsh",
+        "shellformat.path": "/home/${remoteUser}/.local/bin/shfmt"
+      },
       "extensions": [
+        "redhat.vscode-yaml",
+        "golang.go",
+        "ms-vscode.powershell",
         "ms-azuretools.vscode-bicep",
-        "hashicorp.terraform"
+        "edwinhuish.better-comments-next",
+        "timonwong.shellcheck",
+        "task.vscode-task",
+        "esbenp.prettier-vscode",
+        "fnando.linter",
+        "ms-azuretools.vscode-azure-github-copilot",
+        "ms-azuretools.vscode-docker",
+        "davidanson.vscode-markdownlint",
+        "hashicorp.terraform",
+        "github.copilot",
+        "github.copilot-chat",
+        "github.vscode-github-actions",
+        "github.vscode-pull-request-github",
+        "github.codespaces",
+        "github.remotehub",
+        "bierner.github-markdown-preview",
+        "usernamehw.errorlens",
+        "lumirelle.shell-format-rev",
+        "editorconfig.editorconfig"
       ]
     }
   }

.github/linters/.markdownlint-cli2.yaml

@@ -7,3 +7,5 @@ ignores:
   - .git
   - "**/node_modules/**"
   - .copilot-tracking/**
+  - venv/**
+  - .venv/**

.github/linters/.markdownlint.yml

@@ -30,7 +30,7 @@ MD029:
 # MD033/no-inline-html - Inline HTML
 MD033:
   # Allowed elements
-  allowed_elements: [br, pre, a]
+  allowed_elements: [br, pre]
 
 # MD036/no-emphasis-as-heading - Emphasis used instead of a heading
 MD036: false

.github/linters/.prettierrc.yml

@@ -0,0 +1,38 @@
+# yaml-language-server: $schema=https://www.schemastore.org/prettierrc.json
+---
+arrowParens: always
+bracketSpacing: true
+endOfLine: lf
+htmlWhitespaceSensitivity: css
+insertPragma: false # consider true
+singleAttributePerLine: false
+bracketSameLine: false
+jsxSingleQuote: true
+printWidth: 120
+proseWrap: preserve
+quoteProps: as-needed
+requirePragma: false # consider true
+semi: true
+singleQuote: true
+tabWidth: 2
+trailingComma: none
+useTabs: false
+vueIndentScriptAndStyle: true
+embeddedLanguageFormatting: auto
+experimentalTernaries: true
+experimentalOperatorPosition: end
+# multilineArraysWrapThreshold: 1
+# plugins:
+#   - prettier-plugin-multiline-arrays
+
+# Language-specific overrides
+overrides:
+  - files: "*.md"
+    options:
+      proseWrap: always
+  - files: "*.yml"
+    options:
+      singleQuote: false
+  - files: "*.yaml"
+    options:
+      singleQuote: false

.github/linters/.shellcheckrc

@@ -0,0 +1,3 @@
+# .shellcheckrc
+
+disable=SC3037,SC2086,SC2155

.github/linters/.yamllint.yml

@@ -0,0 +1,29 @@
+# yaml-language-server: $schema=https://www.schemastore.org/yamllint.json
+# docs: https://yamllint.readthedocs.io/en/stable/configuration.html#extending-the-default-configuration
+---
+extends: default
+
+locale: en_US.UTF-8
+
+rules:
+  document-start:
+    level: warning
+    ignore:
+      - .cspell.yml
+  line-length: disable
+  quoted-strings:
+    level: error
+    quote-type: double
+    required: only-when-needed
+  comments:
+    min-spaces-from-content: 1
+  braces:
+    level: warning
+    min-spaces-inside: 0
+    max-spaces-inside: 1
+  truthy:
+    check-keys: false
+
+ignore-from-file:
+  - .gitignore
+  - .yamlignore

.github/linters/actionlint.yaml

@@ -0,0 +1,20 @@
+---
+self-hosted-runner:
+  # Labels of self-hosted runner in array of strings.
+  labels: []
+
+# Configuration variables in array of strings defined in your repository or
+# organization. `null` means disabling configuration variables check.
+# Empty array means no configuration variable is allowed.
+config-variables: null
+
+# Configuration for file paths. The keys are glob patterns to match to file
+# paths relative to the repository root. The values are the configurations for
+# the file paths. Note that the path separator is always '/'.
+# The following configurations are available.
+#
+# "ignore" is an array of regular expression patterns. Matched error messages
+# are ignored. This is similar to the "-ignore" command line option.
+paths:
+#  .github/workflows/**/*.yml:
+#    ignore: []

.github/workflows/ci.yml

@@ -14,89 +14,24 @@ on:
       - main
     types:
       - opened
+      - reopened
       - synchronize
+      - ready_for_review
   merge_group:
   # schedule:
   #   - cron: "0 2 * * *"
   workflow_dispatch:
 
+permissions: {}
+
 concurrency:
   group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }}
   cancel-in-progress: true
 
 env:
   CLI_VERSION: ${{ github.sha }}
 
-permissions: {}
-
 jobs:
-  lint-go:
-    name: 🧹 Lint Go
-    runs-on: ubuntu-24.04
-    timeout-minutes: 10
-    permissions:
-      contents: read
-      pull-requests: read
-    steps:
-      - name: ⤵️ Checkout
-        uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
-        with:
-          persist-credentials: false
-
-      - name: 🚧 Setup Go
-        uses: actions/setup-go@4dc6199c7b1a012772edbd06daecab0f50c9053c # v6.1.0
-        with:
-          go-version-file: go.mod
-          cache: true
-
-      - name: 🚧 Setup Task
-        uses: go-task/setup-task@0ab1b2a65bc55236a3bc64cde78f80e20e8885c2 # v1.0.0
-
-      - name: 🔀 Get dependencies
-        run: task deps
-
-      - name: ✔️ Run GoVulnCheck
-        run: |
-          task install:govulncheck
-          task govulncheck || (echo "::warning::govulncheck found issues" && exit 0)
-
-      - name: ✔️ Run Go linters
-        uses: golangci/golangci-lint-action@1e7e51e771db61008b38414a730f564565cf7c20 # v9.2.0
-        with:
-          version: latest
-          only-new-issues: true
-          skip-cache: true
-          skip-save-cache: true
-          problem-matchers: true
-
-  lint-markdown:
-    name: 🧹 Lint Markdown
-    runs-on: ubuntu-24.04
-    timeout-minutes: 10
-    permissions:
-      contents: read
-    steps:
-      - name: ⤵️ Checkout
-        uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
-        with:
-          persist-credentials: false
-
-      - name: 🚧 Setup Go
-        uses: actions/setup-go@4dc6199c7b1a012772edbd06daecab0f50c9053c # v6.1.0
-        with:
-          go-version-file: go.mod
-          cache: true
-
-      - name: 🚧 Setup Task
-        uses: go-task/setup-task@0ab1b2a65bc55236a3bc64cde78f80e20e8885c2 # v1.0.0
-
-      - name: 🔨 Setup tools
-        run: |
-          task install:markdownlint
-
-      - name: ✔️ Run Files linters
-        run: task lint:md
-
   build:
     name: 🏗️ Build
     runs-on: ubuntu-24.04
@@ -122,7 +57,7 @@ jobs:
         run: task deps:download
 
       - name: 🔨 Setup Build tools
-        run: task install:goreleaser
+        run: task go:install:goreleaser
 
       - name: 🏗️ Build
         run: task build
@@ -155,7 +90,7 @@ jobs:
         run: task deps:download
 
       - name: 🔨 Setup Test tools
-        run: task test:tools
+        run: task go:tools:test
 
       - name: 🧪 Run Tests
         run: task testunit

.github/workflows/dependency-review.yml

@@ -27,7 +27,4 @@ jobs:
       - name: 🕵️ Run Dependency Review
         uses: actions/dependency-review-action@3c4e3dcb1aa7874d2c16be7d79418e9b7efd6261 # v4.8.2
         with:
-          vulnerability-check: true
-          license-check: true
-          show-openssf-scorecard: true
-          comment-summary-in-pr: always
+          comment-summary-in-pr: on-failure