Add linting workflow using super-linter (#12)

* chore: add linting workflow using Super-linter for pull requests

* chore: limit validation tools in super-linter

* chore: use slim version of super-linter

* fix: ensure top-level workflow permissions are set

* chore: bump github-script version

* chore: fix linting for double quotes

Author: FidelusAleksander

.github/workflows/_labeler.yml

@@ -1,13 +1,14 @@
 name: Label PRs
 on:
-  - pull_request_target
+  pull_request_target:
+
+permissions:
+  contents: read
+  pull-requests: write
 
 jobs:
   labeler:
     name: PR Labeler
-    permissions:
-      contents: read
-      pull-requests: write
     runs-on: ubuntu-latest
     steps:
       - uses: actions/labeler@v5

.github/workflows/_lint.yml

@@ -0,0 +1,25 @@
+name: Lint
+
+on:
+  pull_request:
+
+permissions:
+  contents: read
+  statuses: write   # To report GitHub Actions status checks
+
+jobs:
+  lint:
+    name: Lint
+    runs-on: ubuntu-latest
+
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+
+      - name: Super-linter
+        uses: super-linter/super-linter/[email protected]
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          VALIDATE_GITHUB_ACTIONS: true
+          VALIDATE_CHECKOV: true

.github/workflows/finish-exercise.yml

@@ -8,6 +8,10 @@ on:
         required: true
         type: string
 
+permissions:
+  contents: write
+  issues: write
+
 jobs:
   update_readme:
     name: Update README with congratulations

.github/workflows/start-exercise.yml

@@ -42,7 +42,7 @@ jobs:
           # Find all workflow files that start with a number (0-9)
           workflows=$(git ls-files | grep -E '^\.github/workflows/[0-9].*\.(yml|yaml)$')
           for workflow in $workflows; do
-            workflow_name=$(basename $workflow)
+            workflow_name="$(basename "$workflow")"
             echo "Disabling workflow: $workflow_name"
             gh workflow disable "$workflow_name" || true
           done
@@ -78,7 +78,7 @@ jobs:
 
       - name: Create issue - add welcome message
         id: create-issue
-        uses: actions/github-script@v6
+        uses: actions/github-script@v7
         with:
           script: |
             const { data: issue } = await github.rest.issues.create({