ci: add docker security scan and lint workflow #5

	name: Docker lint
	on:
	pull_request:
	types: [opened, synchronize, reopened]
	push:
	branches: [ main ]

	jobs:
	lint:
	name: Lint Dockerfiles
	runs-on: ubuntu-latest
	steps:
	- name: Checkout
	uses: actions/checkout@v4

	- name: Set up Python
	uses: actions/setup-python@v4
	with:
	python-version: '3.x'

	- name: Install yamllint
	run: pip install yamllint

	- name: Find and run yamllint on compose files
	run: \|
	set -euo pipefail
	files=$(git ls-files "*/docker-compose.yml" "*/docker-compose.yaml" \|\| true)
	if [ -n "$files" ]; then
	echo "$files" \| xargs yamllint
	else
	echo "No compose files found"
	fi

Provide feedback