homeserver/.woodpecker/ansible-lint.yml

---
depends_on:
  - gitleaks

steps:
  ansible-lint:
    image: quay.io/ansible/creator-ee:v24.2.0
    commands:
      - ansible-lint --version
      - echo $${VAULTPASS} > ./vault-pass.yml # nach des Secret in Großschreibung
      - ansible-galaxy install -r requirements.yaml
      - ansible-lint --force-color --format pep8
    # https://woodpecker-ci.org/docs/usage/secrets#use-secrets-in-commands
    secrets: [vaultpass]
    when:
      - event: [push, pull_request, cron, pull_request_closed, tag, release, manual]
        evaluate: 'CI_COMMIT_AUTHOR_EMAIL != "renovate@mgrote.net"'
...