Add ansible linter action

.ansible-lint

@@ -0,0 +1,15 @@
+---
+exclude_paths:
+# NOTE(luisd): AFAIK ansible-lint has neither an "include files only" configuration nor a glob implementation,
+#  so we exclude all yaml files manually from the root directory :/
+ - dev-cluster.yaml
+ - local-dev-cluster.yaml
+ - .kube-linter.yaml
+ - .github/
+ - .vscode/
+ - .git
+
+sarif_file: ansible.sarif
+
+kinds:
+ - playbook: '**/*-playbook.{yaml,yml}'

.github/workflows/ansible-linter.yaml

@@ -0,0 +1,22 @@
+name: ansible-lint
+on:
+  pull_request:
+  push:
+    branches:
+      - main
+
+
+jobs:
+  build:
+    name: Ansible Lint # Naming the build is important to use it as a status check
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - name: Run ansible-lint
+        uses: ansible/ansible-lint@main # or version tag instead of 'main'
+      - name: Upload sarif
+        if: always()
+        uses: github/codeql-action/upload-sarif@v2
+        with:
+         sarif_file: ansible.sarif
+         category: ansible-lint

.gitignore

@@ -1,2 +1,3 @@
 .vagrant/**
-local-dev-cluster.yaml
+local-dev-cluster.yaml
+**.sarif