Add a soundness check to lint Python files

Author: ahoppen

.github/workflows/soundness.yml

@@ -51,6 +51,14 @@ on:
         type: string
         description: "Container image for the shell check job. Defaults to latest Swift Ubuntu image."
         default: "swift:6.0-noble"
+      python_lint_enabled:
+        type: boolean
+        description: "Boolean to enable the Python lint job. Defaults to true."
+        default: true
+      python_lint_container_image:
+        type: string
+        description: "Container image for the Python lint job. Defaults to latest Swift Ubuntu image."
+        default: "swift:6.0-noble"
 
 ## We are cancelling previously triggered workflow runs
 concurrency:
@@ -177,3 +185,21 @@ jobs:
         run: |
           apt-get -qq update && apt-get -qq -y install shellcheck
           git ls-files -z '*.sh' | xargs -0 shellcheck
+  python-lint:
+    name: Python lint
+    if: ${{ inputs.python_lint_enabled }}
+    runs-on: ubuntu-latest
+    container:
+      image: ${{ inputs.python_lint_container_image }}
+    timeout-minutes: 5
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+        with:
+          persist-credentials: false
+      - name: Run flake8
+        run:  |
+          apt-get -qq update && apt-get -qq -y install python3 python3-pip python3-venv
+          pip3 install flake8 flake8-import-order  --break-system-packages
+          cd ${GITHUB_WORKSPACE}
+          flake8