github-actions-validationlisted

## Input - Workflow YAML in `.github/workflows/` (required) - Validation script: `scripts/validate.sh` (required) - Optional: specific directory path ## Output Specification Return structured Markdown in accordance with [references/common-output-format.md](references/common-output-format.md). That file is the source of truth for the output contract. Structured validation results from three tools: actionlint → ghalint → zizmor. Attribute evidence to the producing tool. ## Execution Scope - **Always use `scripts/validate.sh`** for comprehensive validation. Do not run individual commands. - Script executes all tools in order. - Individual commands are for debugging only (see [references/common-individual-commands.md](references/common-individual-commands.md)) - **Do not review workflow design decisions** (use github-actions-review for that) ### USE FOR: - validate workflow changes before commit or merge - rerun CI-equivalent local checks for workflow failures - verify syntax and security findings from validation tools ### DO NOT USE FOR: - judge workflow architecture or operational policy quality - edit workflow files automatically - validate non-workflow YAML files ## Reference Files Guide - [common-checklist.md](references/common-checklist.md) (always read) - [common-output-format.md](references/common-output-format.md) (always read) - [common-troubleshooting.md](references/common-troubleshooting.md) (read on failure) - [common-individual-commands.md](references/co