Add CI, pre-commit hooks

.ansible-lint

@@ -0,0 +1,9 @@
+exclude_paths:
+  - .pre-commit-config.yaml
+  - icingaagents.yml
+  - roles/common/handlers/main.yml
+  - authzkeys.yml
+  - inventories
+offline: false
+skip_list:
+  - role-name

.github/workflows/lint.yml

@@ -0,0 +1,13 @@
+# .github/workflows/ansible-lint.yml
+name: ansible-lint
+on:
+  pull_request:
+    branches: ["main"]
+jobs:
+  build:
+    name: Ansible Lint
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - name: Run ansible-lint
+        uses: ansible/[email protected]

.gitignore

@@ -5,7 +5,8 @@
 .LSOverride
 
 # Icon must end with two \r
-Icon
+Icon
+
 
 # Thumbnails
 ._*
@@ -25,3 +26,6 @@ Network Trash Folder
 Temporary Items
 .apdisk
 # END OSX.gitignore
+
+# ignore editor cruft
+.vscode

.pre-commit-config.yaml

@@ -0,0 +1,44 @@
+# See https://pre-commit.com for more information
+# See https://pre-commit.com/hooks.html for more hooks
+repos:
+- repo: https://github.com/pre-commit/pre-commit-hooks
+  rev: v4.5.0
+  hooks:
+    - id: trailing-whitespace
+    - id: end-of-file-fixer
+    - id: check-yaml
+    - id: check-added-large-files
+    - id: requirements-txt-fixer
+
+- repo: https://github.com/Yelp/detect-secrets
+  rev: v1.4.0
+  hooks:
+    - id: detect-secrets
+      args:
+        - --baseline
+        - .secrets.baseline
+
+- repo: https://github.com/ansible-community/ansible-lint
+  rev: v24.2.1
+  hooks:
+    - id: ansible-lint
+      always_run: false
+      files: ^.*.yml
+      exclude: .github
+      additional_dependencies:
+        - ansible-core>=2.16.0
+      args:
+        - --exclude
+        - .pre-commit-config.yaml
+        - icingaagents.yml
+        # For some reason noqa is not being picked up on these files
+        - roles/common/handlers/main.yml
+        - authzkeys.yml
+        # ssp-modules is a bad name for a role
+        - roles/ssp-modules
+
+- repo: https://github.com/python-jsonschema/check-jsonschema
+  rev: 0.28.0
+  hooks:
+    - id: check-github-workflows
+    - id: check-dependabot