Add ShellCheck GitHub Actions workflow with local make target

- Add hack/test-shellcheck.sh wrapper script following the same pattern
  as hack/test-kustomize.sh for local developer use
- Add test-shellcheck Makefile target that invokes the wrapper script
- Add shellcheck to check-deps dependency verification
- GHA workflow delegates to make test-shellcheck instead of inline commands
- Fix SC2145 shellcheck errors in extra-manifests-builder test scripts

Author: sebrandon1

.github/workflows/shellcheck.yml

@@ -0,0 +1,24 @@
+---
+name: ShellCheck
+
+on:
+  pull_request:
+    branches:
+      - main
+    paths:
+      - "**/*.sh"
+      - "Makefile"
+
+permissions:
+  contents: read
+
+jobs:
+  shellcheck:
+    name: Validate Shell Scripts
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+
+      - name: Validate Shell Scripts
+        run: make test-shellcheck

Makefile

@@ -44,6 +44,13 @@ check-deps:
 		echo "✗ Missing (install from: https://go.dev/dl/)"; \
 		MISSING=$$((MISSING+1)); \
 	fi; \
+	echo -n "Checking shellcheck... "; \
+	if command -v shellcheck >/dev/null 2>&1; then \
+		echo "✓ Found: $$(shellcheck --version 2>&1 | grep version: | head -1)"; \
+	else \
+		echo "✗ Missing (install: brew install shellcheck or apt-get install shellcheck)"; \
+		MISSING=$$((MISSING+1)); \
+	fi; \
 	echo ""; \
 	if [ $$MISSING -eq 0 ]; then \
 		echo "✅ All dependencies are installed!"; \
@@ -116,6 +123,10 @@ ocp-doc-check:  ## Download and run ocp-doc-checker against markdown files
 test-kustomize:  ## Validate all kustomization.yaml files can build
 	./hack/test-kustomize.sh
 
+.PHONY: test-shellcheck
+test-shellcheck:  ## Validate shell scripts with shellcheck
+	./hack/test-shellcheck.sh
+
 ci-validate: lintCheck check-reference-core check-reference-ran check-reference-hub
 
 .PHONY: check-reference-core

hack/test-shellcheck.sh

@@ -0,0 +1,57 @@
+#!/bin/bash
+
+set -e
+
+RED='\033[0;31m'
+GREEN='\033[0;32m'
+NC='\033[0m' # No Color
+
+if ! command -v shellcheck &> /dev/null; then
+    echo -e "${RED}ERROR: shellcheck is not installed${NC}"
+    echo ""
+    echo "Please install shellcheck to run this check:"
+    echo "  - macOS: brew install shellcheck"
+    echo "  - Fedora/RHEL: dnf install ShellCheck"
+    echo "  - Ubuntu/Debian: apt-get install shellcheck"
+    echo "  - Manual: https://github.com/koalaman/shellcheck#installing"
+    echo ""
+    exit 1
+fi
+
+echo "Running ShellCheck on all shell scripts..."
+echo ""
+
+ERRORS=0
+CHECKED=0
+
+shell_files=()
+while IFS= read -r file; do
+    shell_files+=("$file")
+done < <(find . -name '*.sh' -not -path './.git/*' -not -path './venv/*' -not -path '*/.venv/*' -not -path './sdk-go/*' | sort)
+
+if [ ${#shell_files[@]} -eq 0 ]; then
+    echo "No shell scripts found"
+    exit 0
+fi
+
+for script in "${shell_files[@]}"; do
+    echo -n "  $script: "
+    CHECKED=$((CHECKED + 1))
+    if shellcheck --severity=error "$script" 2>&1; then
+        echo -e "${GREEN}OK${NC}"
+    else
+        echo -e "${RED}FAILED${NC}"
+        ERRORS=$((ERRORS + 1))
+    fi
+done
+
+echo ""
+echo "Summary: Checked $CHECKED shell scripts"
+
+if [[ $ERRORS -eq 0 ]]; then
+    echo -e "${GREEN}All shell scripts passed ShellCheck!${NC}"
+    exit 0
+else
+    echo -e "${RED}$ERRORS script(s) failed ShellCheck${NC}"
+    exit 1
+fi

telco-ran/configuration/extra-manifests-builder/01-container-mount-ns-and-kubelet-conf/test.sh

@@ -1,7 +1,7 @@
 #!/bin/bash
 
 fatal() {
-    echo "FATAL: $@"
+    echo "FATAL: $*"
     exit 1
 }
 

telco-ran/configuration/extra-manifests-builder/08-set-rcu-normal/test.sh

@@ -1,7 +1,7 @@
 #!/bin/bash
 
 fatal() {
-  echo "FATAL: $@"
+  echo "FATAL: $*"
   exit 1
 }