Repository navigation

Merge audited organized-pattern research and TNFR foundations #225

	name: Lint Workflows

	on:
	pull_request:
	paths:
	- '.github/workflows/**'
	- 'tools/**'
	- 'scripts/**'
	push:
	branches: ["main"]
	paths:
	- '.github/workflows/**'
	- 'tools/**'
	- 'scripts/**'

	concurrency:
	group: ${{ github.workflow }}-${{ github.ref }}
	cancel-in-progress: true

	permissions:
	contents: read

	jobs:
	validate-bandit-format:
	name: Validate Bandit format usage
	runs-on: ubuntu-latest
	steps:
	- name: Check out repository
	uses: actions/checkout@v5

	- name: Check for invalid bandit -f sarif usage
	run: \|
	# Search for bandit commands with -f sarif which is not supported
	if grep -r "bandit.*-f sarif" .github/workflows/ scripts/ --exclude=lint-workflows.yml 2>/dev/null; then
	echo "ERROR: Found 'bandit -f sarif' usage. Bandit does not support SARIF format."
	echo "Supported formats: csv, custom, html, json, screen, txt, xml, yaml"
	echo "Use a format supported by the installed Bandit version, such as JSON."
	exit 1
	fi
	echo "✓ No invalid bandit format usage found"