Lint GitHub Actions

Right now we pass NPM token in github action and plan to have automatic
releases that is why it is critical to lint action files.
I didn't find any JS-based solution and the only validator I could find
is https://github.com/rhysd/actionlint

Author: IvanGoncharov

.github/workflows/ci.yml

@@ -31,6 +31,11 @@ jobs:
       - name: Spellcheck
         run: npm run check:spelling
 
+      - name: Lint GitHub Actions
+        uses: docker://rhysd/actionlint:latest
+        with:
+          args: -color
+
   checkForCommonlyIgnoredFiles:
     name: Check for commonly ignored files
     runs-on: ubuntu-latest

.github/workflows/cmd-publish-pr-on-npm.yml

@@ -3,10 +3,12 @@ on:
   workflow_call:
     inputs:
       pullRequestJSON:
+        description: String that contain JSON payload for `pull_request` event.
         required: true
         type: string
     secrets:
       NPM_CANARY_PR_PUBLISH_TOKEN:
+        description: NPM token to publish canary release.
         required: true
 jobs:
   build-npm-dist:

.github/workflows/cmd-run-benchmark.yml

@@ -3,6 +3,7 @@ on:
   workflow_call:
     inputs:
       pullRequestJSON:
+        description: String that contain JSON payload for `pull_request` event.
         required: true
         type: string
 jobs:
@@ -19,7 +20,7 @@ jobs:
       - name: Deepen cloned repo
         env:
           BASE_SHA: ${{ fromJSON(inputs.pullRequestJSON).base.sha }}
-        run: 'git fetch --depth=1 origin $BASE_SHA:refs/tags/BASE'
+        run: 'git fetch --depth=1 origin "$BASE_SHA:refs/tags/BASE"'
 
       - name: Setup Node.js
         uses: actions/setup-node@v2

.github/workflows/deploy-artifact-as-branch.yml

@@ -3,15 +3,19 @@ on:
   workflow_call:
     inputs:
       environment:
+        description: Environment to publish under
         required: true
         type: string
       artifact_name:
+        description: Artifact name
         required: true
         type: string
       target_branch:
+        description: Target branch
         required: true
         type: string
       commit_message:
+        description: Commit message
         required: true
         type: string
 jobs:

.github/workflows/pull_request.yml

@@ -16,7 +16,7 @@ jobs:
       - name: Deepen cloned repo
         env:
           BASE_SHA: ${{ github.event.pull_request.base.sha }}
-        run: 'git fetch --depth=1 origin $BASE_SHA:refs/tags/BASE'
+        run: 'git fetch --depth=1 origin "$BASE_SHA:refs/tags/BASE"'
 
       - name: Setup Node.js
         uses: actions/setup-node@v2