.PHONY: lint

# `make lint` runs actionlint across all workflow files with the narrowly-scoped
# .github/actionlint.yaml config. The -ignore SC2086 covers intentional
# unquoted expansions in CI shell scripts (e.g. tokens that must word-split).
# All other checks stay fully enforced.
#
# Flags must precede the file paths: actionlint uses Go's flag parser, which
# stops parsing flags at the first positional argument. The glob expands to
# the list of .yml files (actionlint cannot take a bare directory path).
lint:
	actionlint -ignore SC2086 -config-file .github/actionlint.yaml .github/workflows/*.yml