github-actions-validationlisted

## Input - Workflow YAML path or glob (required): `.github/workflows/` - Validation script (required): `scripts/validate.sh` - Directory path (optional): scope validation to a subdirectory ## Output Specification Return structured Markdown in accordance with [references/common-output-format.md](references/common-output-format.md). That file is the source of truth for the output contract. Structured validation results from four tools: ORD-01 map order → actionlint → ghalint → zizmor. Attribute evidence to the producing tool. ## Execution Scope - **Always use `scripts/validate.sh`** for comprehensive validation. Do not run individual commands. - Script executes all tools in order. - Individual commands are for debugging only (see [references/common-individual-commands.md](references/common-individual-commands.md)) ### USE FOR: - validate workflow changes before commit or merge - rerun CI-equivalent local checks for workflow failures - verify syntax and security findings from validation tools ### DO NOT USE FOR: - judge workflow architecture or operational policy quality - edit workflow files automatically - validate non-workflow YAML files ## Reference Files Guide - [common-checklist.md](references/common-checklist.md) (always read) - [common-output-format.md](references/common-output-format.md) (always read) - [common-troubleshooting.md](references/common-troubleshooting.md) (read on failure) - [common-individual-commands.md](references/common-individual-commands.m