ci/gha: add lint job

This is currently similar to what make validate does in .cirrus.yml,
but let's have it as a separate job since it it faster.

Let's keep the same job in Cirrus CI for now.

Note we do not ping Go version, but rather depend on action/setup-go to
know which one is latest.

Signed-off-by: Kir Kolyshkin <kolyshkin@gmail.com>

common/.github/workflows/validate.yml

@@ -7,6 +7,8 @@ on:
       - main
       - v*
   pull_request:
+env:
+  LINT_VERSION: v1.45
 
 jobs:
   codespell:
@@ -18,3 +20,20 @@ jobs:
       run: pip install codespell
     - name: run codespell
       run: codespell
+  lint:
+    runs-on: ubuntu-20.04
+    steps:
+    - uses: actions/checkout@v3
+    - uses: actions/setup-go@v3
+      with:
+        go-version: 1.x # latest stable
+    - name: install deps
+      run: |
+        sudo apt-get -qq update
+        sudo apt-get -qq install libseccomp-dev libdevmapper-dev
+    - name: lint
+      uses: golangci/golangci-lint-action@v3
+      with:
+        version: "${{ env.LINT_VERSION }}"
+    - name: validate seccomp
+      run: ./tools/validate_seccomp.sh ./pkg/seccomp