feat: Lint workflows using actionlint

.github/dependabot.yml

@@ -1,5 +1,9 @@
 version: 2
 updates:
+- package-ecosystem: "docker"
+  directory: "/.github/workflows"
+  schedule:
+    interval: daily
 - package-ecosystem: "github-actions"
   directory: "/"
   schedule:
@@ -24,4 +28,4 @@ updates:
     - dependency-name: "@aws-sdk/*"
       update-types: ["version-update:semver-patch"]
     - dependency-name: "@types/node"
-      update-types: ["version-update:semver-patch"]
+      update-types: ["version-update:semver-patch"]

.github/workflows/actionlint.dockerfile

@@ -0,0 +1,4 @@
+# Workaround for https://github.com/dependabot/dependabot-core/issues/8362.
+# Once that is fixed, remove this file and replace the Docker build and run
+# lines in `.github/workflows/*.yml` with a `uses: docker://rhysd/…` line.
+FROM rhysd/actionlint:1.6.26@sha256:2362769b1d75056da70e7af1b12d9e52746f3a123b8f22a4322869e8f2cd45f2

.github/workflows/push.yml

@@ -15,6 +15,12 @@ jobs:
     steps:
       - uses: linz/action-typescript@v3
 
+      - name: Download actionlint
+        run: docker build --tag actionlint - < .github/workflows/actionlint.dockerfile
+
+      - name: Run actionlint to check workflow files
+        run: docker run --volume="${PWD}:/repo" --workdir=/repo actionlint -color
+
       - name: Setup GIT version
         id: version
         run: |