Lint

[StepSecurity] Apply security best practices #346

	name: Lint

	on: [pull_request]

	permissions:
	contents: read

	jobs:
	lint:
	runs-on: ubuntu-latest

	steps:
	- name: Harden the runner (Audit all outbound calls)
	uses: step-security/harden-runner@002fdce3c6a235733a90a27c80493a3241e56863 # v2.12.1
	with:
	egress-policy: audit

	- uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0

	- name: Set up Python
	uses: actions/setup-python@7f4fc3e22c37d6ff65e88745f38bd3157c663f7c # v4.9.1
	with:
	python-version: '3.10'

	- name: Install Poetry
	uses: snok/install-poetry@76e04a911780d5b312d89783f7b1cd627778900a # v1.4.1
	with:
	version: latest
	virtualenvs-create: true
	virtualenvs-in-project: true

	- name: Load cached venv
	id: cached-poetry-dependencies
	uses: actions/cache@2f8e54208210a422b2efd51efaa6bd6d7ca8920f # v3.4.3
	with:
	path: ./.venv
	key: venv-${{ runner.os }}-${{ hashFiles('poetry.lock') }}

	- name: Install dependencies
	if: steps.cached-poetry-dependencies.outputs.cache-hit != 'true'
	run: poetry install --with dev

	- name: Lint
	run: make lint

Provide feedback