name: Validate ansible playbooks

on:
  pull_request:
    branches:
      - main
    types:
      - opened
      - synchronize
      - reopened

jobs:
  ansible-validate:
    runs-on: ubuntu-latest

    steps:
      - name: Checkout repository
        uses: actions/checkout@v2

      - name: Setup Sectool
        uses: a13labs/setup-sectool@v1

      - name: Install Python and required packages
        run: |
          sudo apt-get update
          sudo apt-get install -y python3-pip
          python3 -m pip install -r requirements.txt

      - name: Ansible Lint
        run: |
          cd ansible
          ansible-lint .

      - name: Ansible Playbook Syntax Check
        run: |
          cd ansible
          ansible-playbook --syntax-check playbook_*.yml