ci: use the shared zizmor and YAML extension check

.github/workflows/lint.yml

@@ -34,34 +34,3 @@ jobs:
         with:
           dry: true
           prettier_options: --check **/*.{md,yaml,yml}
-
-  zizmor:
-    runs-on: ubuntu-latest
-    permissions:
-      contents: read
-    steps:
-      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
-        with:
-          persist-credentials: false
-
-      - uses: zizmorcore/zizmor-action@cc914d7f3750a2d13d75c7f184a1060aa0e9d482 # v0.6.4
-        with:
-          advanced-security: false
-
-  extensions:
-    runs-on: ubuntu-latest
-    timeout-minutes: 5
-    permissions:
-      contents: read
-    steps:
-      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
-        with:
-          persist-credentials: false
-
-      - name: GitHub Actions files end in .yml, other YAML files in .yaml
-        run: |
-          wrong=$(
-            git ls-files '.github/*.yaml' 'action.yaml' '*/action.yaml'
-            git ls-files '*.yml' ':!.github/*' ':!action.yml' ':!*/action.yml'
-          )
-          if [ -n "$wrong" ]; then echo "$wrong"; exit 1; fi

.github/workflows/required.yml

@@ -21,10 +21,15 @@ jobs:
     permissions:
       contents: read
 
+  shared-lint:
+    uses: femiwiki/.github/.github/workflows/shared-lint.yml@243836c393e62e7887baad11dd1619dcc1bb0fac
+    permissions:
+      contents: read
+
   # The one check branch protection requires. What has to pass is the
   # workflows called above, so adding a check does not touch femiwiki/infra.
   required:
-    needs: [lint, test, long-comments]
+    needs: [lint, test, long-comments, shared-lint]
     if: always()
     runs-on: ubuntu-latest
     timeout-minutes: 5