GH Actions: add yaml/GHA workflow QA checks

.gitattributes

@@ -2,10 +2,12 @@
 # Exclude these files from release archives.
 # https://blog.madewithlove.be/post/gitattributes/
 #
-/.gitattributes export-ignore
-/.gitignore export-ignore
-/.github/ export-ignore
-/Test/ export-ignore
+.gitattributes export-ignore
+.gitignore     export-ignore
+.pinact.yaml   export-ignore
+.yamllint.yml  export-ignore
+/.github/      export-ignore
+/Test/         export-ignore
 
 #
 # Auto detect text files and perform LF normalization

.github/workflows/reusable-qa-checks.yml

@@ -7,6 +7,22 @@ on:
 permissions: {}
 
 jobs:
+  pinact:
+    permissions:
+      contents: read # To clone the repo.
+
+    name: 'Run Pinact'
+    uses: PHPCSStandards/.github/.github/workflows/reusable-pinact.yml@559f40470dbce9f7faeab31f82c0be7dfb93228e # v1.3.0
+
+  yamllint:
+    permissions:
+      contents: read # To clone the repo.
+
+    name: 'Lint Yaml'
+    uses: PHPCSStandards/.github/.github/workflows/reusable-yamllint.yml@559f40470dbce9f7faeab31f82c0be7dfb93228e # v1.3.0
+    with:
+      strict: true
+
   xmllint:
     permissions:
       contents: read # To clone the repo.

.pinact.yaml

@@ -0,0 +1,8 @@
+# yaml-language-server: $schema=https://raw.githubusercontent.com/suzuki-shunsuke/pinact/refs/heads/main/json-schema/pinact.json
+# pinact - https://github.com/suzuki-shunsuke/pinact
+
+version: 3
+
+min_age:
+  value: 3     # Default is 7 days
+  always: true # Always check this, not just when updating pins.

.yamllint.yml

@@ -0,0 +1,22 @@
+# Details on the default config:
+# https://yamllint.readthedocs.io/en/stable/configuration.html#default-configuration
+extends: default
+
+yaml-files:
+  - '*.yaml'
+  - '*.yml'
+  - '.yamllint'
+
+# Rule documentation: https://yamllint.readthedocs.io/en/stable/rules.html
+rules:
+  colons:
+    max-spaces-after: -1  # Disabled to allow aligning of values.
+  comments:
+    min-spaces-from-content: 1
+  comments-indentation: {}
+  document-start:
+    present: false
+  line-length:
+    max: 145
+  truthy:
+    allowed-values: ["true", "false", "on", "off"]