Introduce Bootstrap Secrets #363

	name: Ansible Lint

	on: [push, pull_request]

	jobs:
	build:
	runs-on: ubuntu-latest
	permissions:
	contents: read

	steps:
	- name: Checkout Code
	uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
	with:
	persist-credentials: false

	# The ansible-lint GitHub action installs via uv with a lock that tracks the newest
	# ansible-core; ansible-galaxy collection install then hits Galaxy KeyError: 'results'
	# on some 2.19+/2.20 clients. Pin ansible-core to the 2.18 series for a stable Galaxy client.
	- name: Set up Python
	uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 # v5.6.0
	with:
	python-version: "3.12"

	- name: Install ansible-lint and Galaxy-compatible ansible-core
	run: \|
	python -m pip install --upgrade pip
	pip install ansible-lint "ansible-core>=2.18.0,<2.19.0"

	- name: Install Ansible Galaxy collection dependencies
	run: ansible-galaxy collection install -r requirements.yml

	- name: Run ansible-lint
	run: ansible-lint roles playbooks plugins

Provide feedback