fix lint findings

Signed-off-by: Martin Schurz <[email protected]>

.github/workflows/galaxy-publish.yml

@@ -0,0 +1,45 @@
+---
+name: Publish collection to Ansible Galaxy
+
+on:  # yamllint disable-line rule:truthy
+  release:
+    types:
+      - published
+
+jobs:
+  deploy:
+    if: github.repository == 'dev-sec/ansible-collection-hardening'
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      # deploy the collection first, because if it fails, we don't want
+      # to update the galaxy.yml
+      - name: Deploy the collection
+        uses: artis3n/ansible_galaxy_collection@v2
+        with:
+          api_key: ${{ secrets.GALAXY_API_KEY }}
+          galaxy_version: ${{ github.event.release.tag_name }}
+
+      # checkout master instead of the release-tag so we can push the galaxy.yml
+      - uses: actions/checkout@v4
+        with:
+          ref: master
+
+      - name: update galaxy.yml with new version
+        uses: microsoft/variable-substitution@v1
+        with:
+          files: 'galaxy.yml'
+        env:
+          version: "${{ github.event.release.tag_name }}"
+
+      - name: push galaxy.yml
+        uses: github-actions-x/[email protected]
+        with:
+          github-token: ${{ secrets.GITHUB_TOKEN }}
+          push-branch: 'master'
+          commit-message: 'update galaxy.yml with new version'
+          force-add: 'true'
+          files: galaxy.yml
+          name: dev-sec CI
+          email: [email protected]