Shellcheck workflow

[cneill]

Description

This PR adds a GitHub Actions workflow to run shellcheck on shell scripts modified as part of a PR.

[sc-2794]

[dryrunsecurity]

Contextual Security Analysis

As DryRun Security performs checks, we’ll summarize them here. You can always dive into the results in the section below for checks.

Status	DryRun Security Check
✅	AI-powered Sensitive Function Check
✅	Configured Sensitive Files Check
✅	AI-powered Sensitive Files Check

Chat with your AI-powered Security Buddy by typing /dryrunsec: (or /drs:) followed by your question. Example: /dryrunsec: From a security perspective, what are some sensitive files in an Express application?

Install and configure more repositories at DryRun Security

[kiblik]

Are Renovate or Dependabot able to monitor new releases for this kind of definition?

[mtesauro]

I'd say lets merge this PR and see if Renovate/Dependabot catch it in the future. I suspect it doesn't get rev'ed frequently and I'd rather have this in place with the chance of it going stale vs not have it in place.

[cneill]

I suspect Renovate / Dependabot won't catch this, but thankfully shellcheck only seems to release about once a year, and I don't think we'd miss out on much if we were one release behind.

[mtesauro]

Approved.

[kiblik]

Hi guys, I'm happy that this linter was merged quickly but existing issues have not been fixed.
It detects previous issues (and fails tests) in existing PRs which didn't even touch problematic lines.
E.g. https://github.com/DefectDojo/django-DefectDojo/pull/9002/files.