ci(workflows): add GitHub Actions pipeline with commit stage quality checks

Author: stefaniuk

.github/actions/check-file-format/action.yaml

@@ -0,0 +1,10 @@
+name: "Check file format"
+description: "Check file format"
+runs:
+  using: "composite"
+  steps:
+    - name: "Check file format"
+      shell: bash
+      run: |
+        export BRANCH_NAME=origin/${{ github.event.repository.default_branch }}
+        check=branch ./scripts/githooks/check-file-format.sh

.github/actions/check-markdown-format/action.yaml

@@ -0,0 +1,10 @@
+name: "Check Markdown format"
+description: "Check Markdown format"
+runs:
+  using: "composite"
+  steps:
+    - name: "Check Markdown format"
+      shell: bash
+      run: |
+        export BRANCH_NAME=origin/${{ github.event.repository.default_branch }}
+        check=branch ./scripts/githooks/check-markdown-format.sh

.github/actions/check-markdown-links/action.yaml

@@ -0,0 +1,10 @@
+name: "Check Markdown links"
+description: "Check Markdown links"
+runs:
+  using: "composite"
+  steps:
+    - name: "Check Markdown links"
+      shell: bash
+      run: |
+        export BRANCH_NAME=origin/${{ github.event.repository.default_branch }}
+        check=branch ./scripts/githooks/check-markdown-links.sh

.github/actions/scan-secrets/action.yaml

@@ -0,0 +1,10 @@
+name: "Scan secrets"
+description: "Scan secrets"
+runs:
+  using: "composite"
+  steps:
+    - name: "Scan secrets"
+      shell: bash
+      run: |
+        # Please do not change this `check=whole-history` setting, as new patterns may be added or history may be rewritten.
+        check=whole-history ./scripts/githooks/scan-secrets.sh

.github/workflows/cicd-1-pull-request.yaml

@@ -0,0 +1,14 @@
+name: "CI/CD pull request"
+
+on:
+  push:
+    branches:
+      - "**"
+  pull_request:
+    types: [opened, reopened, synchronize]
+
+jobs:
+  commit-stage:
+    name: "Commit stage"
+    uses: ./.github/workflows/stage-1-commit.yaml
+    secrets: inherit

.github/workflows/stage-1-commit.yaml

@@ -0,0 +1,50 @@
+name: "Commit stage"
+
+on:
+  workflow_call:
+
+jobs:
+  scan-secrets:
+    name: "Scan secrets"
+    runs-on: ubuntu-latest
+    timeout-minutes: 2
+    steps:
+      - name: "Checkout code"
+        uses: actions/checkout@v6
+        with:
+          fetch-depth: 0 # Full history is needed to scan all commits
+      - name: "Scan secrets"
+        uses: ./.github/actions/scan-secrets
+  check-file-format:
+    name: "Check file format"
+    runs-on: ubuntu-latest
+    timeout-minutes: 2
+    steps:
+      - name: "Checkout code"
+        uses: actions/checkout@v6
+        with:
+          fetch-depth: 0 # Full history is needed to compare branches
+      - name: "Check file format"
+        uses: ./.github/actions/check-file-format
+  check-markdown-format:
+    name: "Check Markdown format"
+    runs-on: ubuntu-latest
+    timeout-minutes: 2
+    steps:
+      - name: "Checkout code"
+        uses: actions/checkout@v6
+        with:
+          fetch-depth: 0 # Full history is needed to compare branches
+      - name: "Check Markdown format"
+        uses: ./.github/actions/check-markdown-format
+  check-markdown-links:
+    name: "Check Markdown links"
+    runs-on: ubuntu-latest
+    timeout-minutes: 2
+    steps:
+      - name: "Checkout code"
+        uses: actions/checkout@v6
+        with:
+          fetch-depth: 0 # Full history is needed to compare branches
+      - name: "Check Markdown links"
+        uses: ./.github/actions/check-markdown-links

Makefile

@@ -72,6 +72,7 @@ config:: # Configure development environment (main) @Configuration
 ${VERBOSE}.SILENT: \
 	apply \
 	clean \
+	clone-rt \
 	config \
 	count-tokens \
 	format \