Batch processor testing, comments #3794

	# This workflow is for various linting tasks that act in bulk over the repository.
	# Scoped linting (i.e. code formatting) should be done in the respective language-specific workflows.
	name: Repo Lint

	permissions: read-all

	on:
	pull_request:
	branches:
	- main
	merge_group:

	jobs:
	markdownlint:
	runs-on: ubuntu-latest

	steps:
	- name: Harden the runner (Audit all outbound calls)
	uses: step-security/harden-runner@95d9a5deda9de15063e7595e9719c11c38c90ae2 # v2.13.2
	with:
	egress-policy: audit

	- name: check out code
	uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0

	- name: run markdownlint
	uses: DavidAnson/markdownlint-cli2-action@992badcdf24e3b8eb7e87ff9287fe931bcb00c6e # v20.0.0
	with:
	globs: \|
	*/.md

	sanity:
	runs-on: ubuntu-latest

	steps:
	- name: check out code
	uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0

	- name: run sanitycheck.py
	run: python3 ./tools/sanitycheck.py

	renovate-config-validation:
	runs-on: ubuntu-latest

	steps:
	- name: check out code
	uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0

	- name: Set up Node.js
	uses: actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903 # v6.0.0
	with:
	node-version: '24'

	- name: Validate Renovate config
	run: npx --yes --package renovate -- renovate-config-validator --strict

	license-header-check:
	runs-on: ubuntu-latest
	steps:
	- uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
	- uses: korandoru/hawkeye@2f80559b06187bcd1aa7bca5138fe5e5c53e275f # v6.3.0

Provide feedback