chore(ci): add linter for GitHub Actions as pre-commit hook

.github/workflows/build_changelog.yml

@@ -6,5 +6,4 @@ on:
 
 jobs:
   changelog:
-    needs: release
     uses: ./.github/workflows/reusable_publish_changelog.yml

.github/workflows/on_opened_pr.yml

@@ -20,8 +20,6 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v3
-      - name: "Debug workflow_run event"
-        run: echo "${{ github }}"
       - name: "Ensure related issue is present"
         uses: actions/github-script@v6
         env:

.github/workflows/python_build.yml

@@ -28,7 +28,6 @@ jobs:
       matrix:
         python-version: [3.7, 3.8, 3.9]
     env:
-      OS: ${{ matrix.os }}
       PYTHON: ${{ matrix.python-version }}
     steps:
       - uses: actions/checkout@v3
@@ -56,6 +55,6 @@ jobs:
         with:
           file: ./coverage.xml
           # flags: unittests
-          env_vars: OS,PYTHON
+          env_vars: PYTHON
           name: aws-lambda-powertools-python-codecov
           # fail_ci_if_error: true  # failing more consistently making CI unreliable despite all tests above passing

.github/workflows/reusable_deploy_layer_stack.yml

@@ -8,12 +8,15 @@ on:
   workflow_call:
     inputs:
       stage:
+        description: "Deployment stage (BETA, PROD)"
         required: true
         type: string
       artefact-name:
+        description: "CDK Layer Artefact name to download"
         required: true
         type: string
       environment:
+        description: "GitHub Environment to use for encrypted secrets"
         required: true
         type: string
 

.github/workflows/reusable_export_pr_details.yml

@@ -4,13 +4,16 @@ on:
   workflow_call:
     inputs:
       record_pr_workflow_id:
+        description: "Record PR workflow execution ID to download PR details"
         required: true
         type: number
       workflow_origin: # see https://github.com/awslabs/aws-lambda-powertools-python/issues/1349
+        description: "Repository full name for runner integrity"
         required: true
         type: string
     secrets:
       token:
+        description: "GitHub Actions temporary and scoped token"
         required: true
     # Map the workflow outputs to job outputs
     outputs:

.pre-commit-config.yaml

@@ -39,3 +39,8 @@ repos:
     hooks:
       - id: cfn-python-lint
         files: examples/.*\.(yaml|yml)$
+  - repo: https://github.com/rhysd/actionlint
+    rev: v1.6.16
+    hooks:
+      - id: actionlint-docker
+        args: [-pyflakes=]