name: lint

on:
  push:
    branches: [main]
  pull_request:

permissions:
  contents: read

jobs:
  ruff:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v7
      - uses: actions/setup-python@v7
        with:
          python-version: "3.13"
      # version pinned so the same rules apply locally and in CI
      - run: pip install ruff==0.16.8
      - run: ruff check --output-format=github .
