ci: add golangci-lint job

Taken from runc.

Signed-off-by: Kir Kolyshkin <[email protected]>

Author: kolyshkin

.github/workflows/validate.yml

@@ -0,0 +1,38 @@
+name: validate
+on:
+  push:
+    tags:
+      - v*
+    branches:
+      - main
+      - release-*
+  pull_request:
+env:
+  GO_VERSION: 1.24
+permissions:
+  contents: read
+
+jobs:
+  lint:
+    timeout-minutes: 30
+    permissions:
+      contents: read
+      pull-requests: read
+      checks: write # to allow the action to annotate code in the PR.
+    runs-on: ubuntu-24.04
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          fetch-depth: 2
+      - uses: actions/setup-go@v5
+        with:
+          go-version: "${{ env.GO_VERSION }}"
+      - uses: golangci/golangci-lint-action@v6
+        with:
+          version: v1.64
+      # Extra linters, only checking new code from a pull request.
+      - name: lint-extra
+        if: github.event_name == 'pull_request'
+        run: |
+          golangci-lint run --config .golangci-extra.yml --new-from-rev=HEAD~1
+

.golangci-extra.yml

@@ -0,0 +1,12 @@
+# This is golangci-lint config file which is used to check NEW code in
+# github PRs only (see lint-extra in .github/workflows/validate.yml).
+#
+# For the default linter config, see .golangci.yml. This config should
+# only enable additional linters not enabled in the default config.
+
+linters:
+  disable-all: true
+  enable:
+    - godot
+    - revive
+

.golangci.yml

@@ -0,0 +1,13 @@
+# For documentation, see https://golangci-lint.run/usage/configuration/
+
+linters:
+  enable:
+    - gofumpt
+    - errorlint
+    - unconvert
+    - unparam
+
+linters-settings:
+  govet:
+    enable:
+      - nilness