Add a soundness check to lint Python files

Author: ahoppen

.github/workflows/soundness.yml

@@ -51,12 +51,20 @@ on:
         type: string
         description: "Container image for the shell check job. Defaults to latest Swift Ubuntu image."
         default: "swift:6.0-noble"
+      python_lint_enabled:
+        type: boolean
+        description: "Boolean to enable the Python lint job. Defaults to true."
+        default: true
+      python_lint_container_image:
+        type: string
+        description: "Container image for the Python lint job. Defaults to latest Swift Ubuntu image."
+        default: "swift:6.0-noble"
 
 ## We are cancelling previously triggered workflow runs
 concurrency:
   group: ${{ github.workflow }}-${{ github.ref }}-soundness
   cancel-in-progress: true
- 
+
 jobs:
   api-breakage-check:
     name: API breakage check
@@ -177,3 +185,21 @@ jobs:
       run:  |
         apt-get -qq update && apt-get -qq -y install shellcheck
         git ls-files -z '*.sh' | xargs -0 shellcheck
+  python-lint:
+    name: Python lint
+    if: ${{ inputs.python_lint_enabled }}
+    runs-on: ubuntu-latest
+    container:
+      image: ${{ inputs.python_lint_container_image }}
+    timeout-minutes: 5
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+        with:
+          persist-credentials: false
+      - name: Run shellcheck
+        run:  |
+          apt-get -qq update && apt-get -qq -y install python3 python3-pip python3-venv
+          pip3 install flake8 flake8-import-order  --break-system-packages
+          cd ${GITHUB_WORKSPACE}
+          flake8