chore(ci): add yaml checking workflow

.github/chainguard/cbssh-release-branch.sts.yaml

@@ -1,3 +1,4 @@
+# yaml-language-server: $schema=https://raw.githubusercontent.com/octo-sts/app/refs/heads/main/pkg/octosts/octosts.OrgTrustPolicy.json
 issuer: https://token.actions.githubusercontent.com
 audience: octo-sts.their.net
 subject: repo:connectbot/cbssh:ref:refs/heads/main

.github/chainguard/cbssh-release-prepare.sts.yaml

@@ -1,3 +1,4 @@
+# yaml-language-server: $schema=https://raw.githubusercontent.com/octo-sts/app/refs/heads/main/pkg/octosts/octosts.OrgTrustPolicy.json
 issuer: https://token.actions.githubusercontent.com
 audience: octo-sts.their.net
 subject: repo:connectbot/cbssh:ref:refs/heads/main

.github/chainguard/cbssh-release-publish.sts.yaml

@@ -1,3 +1,4 @@
+# yaml-language-server: $schema=https://raw.githubusercontent.com/octo-sts/app/refs/heads/main/pkg/octosts/octosts.OrgTrustPolicy.json
 issuer: https://token.actions.githubusercontent.com
 audience: octo-sts.their.net
 subject: repo:connectbot/cbssh:ref:refs/heads/main

.github/chainguard/cbtelnet-release-branch.sts.yaml

@@ -1,3 +1,4 @@
+# yaml-language-server: $schema=https://raw.githubusercontent.com/octo-sts/app/refs/heads/main/pkg/octosts/octosts.OrgTrustPolicy.json
 issuer: https://token.actions.githubusercontent.com
 audience: octo-sts.their.net
 subject: repo:connectbot/cbtelnet:ref:refs/heads/main

.github/chainguard/cbtelnet-release-prepare.sts.yaml

@@ -1,3 +1,4 @@
+# yaml-language-server: $schema=https://raw.githubusercontent.com/octo-sts/app/refs/heads/main/pkg/octosts/octosts.OrgTrustPolicy.json
 issuer: https://token.actions.githubusercontent.com
 audience: octo-sts.their.net
 subject: repo:connectbot/cbtelnet:ref:refs/heads/main

.github/chainguard/cbtelnet-release-publish.sts.yaml

@@ -1,3 +1,4 @@
+# yaml-language-server: $schema=https://raw.githubusercontent.com/octo-sts/app/refs/heads/main/pkg/octosts/octosts.OrgTrustPolicy.json
 issuer: https://token.actions.githubusercontent.com
 audience: octo-sts.their.net
 subject: repo:connectbot/cbtelnet:ref:refs/heads/main

.github/chainguard/termlib-release-branch.sts.yaml

@@ -1,3 +1,4 @@
+# yaml-language-server: $schema=https://raw.githubusercontent.com/octo-sts/app/refs/heads/main/pkg/octosts/octosts.OrgTrustPolicy.json
 issuer: https://token.actions.githubusercontent.com
 audience: octo-sts.their.net
 subject: repo:connectbot/termlib:ref:refs/heads/main

.github/chainguard/termlib-release-prepare.sts.yaml

@@ -1,3 +1,4 @@
+# yaml-language-server: $schema=https://raw.githubusercontent.com/octo-sts/app/refs/heads/main/pkg/octosts/octosts.OrgTrustPolicy.json
 issuer: https://token.actions.githubusercontent.com
 audience: octo-sts.their.net
 subject: repo:connectbot/termlib:ref:refs/heads/main

.github/chainguard/termlib-release-publish.sts.yaml

@@ -1,3 +1,4 @@
+# yaml-language-server: $schema=https://raw.githubusercontent.com/octo-sts/app/refs/heads/main/pkg/octosts/octosts.OrgTrustPolicy.json
 issuer: https://token.actions.githubusercontent.com
 audience: octo-sts.their.net
 subject: repo:connectbot/termlib:ref:refs/heads/main

.github/chainguard/trusted-token-issuers.yaml

@@ -1,3 +1,4 @@
+# yaml-language-server: $schema=https://raw.githubusercontent.com/octo-sts/app/refs/heads/main/pkg/octosts/octosts.OrgTrustedIssuers.json
 mode: enforce
 issuers:
   - https://token.actions.githubusercontent.com

.github/workflows/yaml-lint.yml

@@ -0,0 +1,28 @@
+# yaml-language-server: $schema=https://www.schemastore.org/github-workflow.json
+name: YAML lint
+
+on:
+  pull_request:
+  workflow_dispatch:
+
+permissions:
+  contents: read
+
+jobs:
+  yaml-lint:
+    name: YAML format and syntax
+    runs-on: ubuntu-latest
+    timeout-minutes: 5
+    steps:
+      - name: Check out repository
+        uses: actions/checkout@fbc6f3992d24b796d5a048ff273f7fcc4a7b6c09  # v5
+        with:
+          persist-credentials: false
+      - name: Set up Python
+        uses: actions/setup-python@ece7cb06caefa5fff74198d8649806c4678c61a1  # v6
+        with:
+          python-version: '3.12'
+      - name: Install yamllint
+        run: python -m pip install yamllint==1.38.0
+      - name: Check YAML format and syntax
+        run: yamllint --strict --format github .

.yamllint.yaml

@@ -0,0 +1,9 @@
+# yaml-language-server: $schema=https://www.schemastore.org/yamllint.json
+extends: default
+
+rules:
+  document-start: disable
+  line-length:
+    max: 160
+  truthy:
+    check-keys: false

FUNDING.yml

@@ -1,2 +1,3 @@
+# yaml-language-server: $schema=https://www.schemastore.org/github-funding.json
 github: kruton
 buy_me_a_coffee: kruton