CI: Harden GHA configuration #117

	---

	name: Linting
	permissions:
	contents: read
	on: [pull_request]

	permissions:
Check failure on line 8 in .github/workflows/lint.yml View workflow run for this annotation GitHub Actions / .github/workflows/lint.yml Invalid workflow file `You have an error in your yaml syntax on line 8`
	contents: read

	jobs:
	flake8:
	name: flake8
	runs-on: ubuntu-latest
	permissions:
	checks: write
	steps:
	- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
	with:
	persist-credentials: false

	- name: Set up Python 3
	uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 # v5.6.0
	with:
	python-version: '3.x'

	- name: Install flake8
	run: pip3 install 'flake8>=3.8'

	- name: Set up reviewdog
	uses: reviewdog/action-setup@e04ffabe3898a0af8d0fb1af00c188831c4b5893 # v1.3.9

	- name: Run flake8
	env:
	REVIEWDOG_GITHUB_API_TOKEN: ${{ secrets.GITHUB_TOKEN }}
	run: \|
	set -o pipefail
	flake8 \| \
	reviewdog -f=pep8 -name=flake8 \
	-tee -reporter=github-check -filter-mode nofilter

Provide feedback