ci: enable PyLint for pull-requests

Copy-paste a pylintrc stub that we can work on in the future.

.github/workflows/python-diff-lint.yml

@@ -0,0 +1,36 @@
+---
+name: Lint Python issues
+
+on:
+  push:
+  pull_request:
+    branches: [main]
+
+jobs:
+  python-lint-job:
+    runs-on: ubuntu-latest
+
+    permissions:
+      # required for all workflows
+      security-events: write
+
+    steps:
+      - name: Repository checkout
+        uses: actions/checkout@v3
+
+      - id: VCS_Diff_Lint
+        name: VCS Diff Lint
+        uses: fedora-copr/vcs-diff-lint-action@v1
+
+      - name: Upload artifact with detected defects in SARIF format
+        uses: actions/upload-artifact@v3
+        with:
+          name: VCS Diff Lint SARIF
+          path: ${{ steps.VCS_Diff_Lint.outputs.sarif }}
+        if: ${{ always() }}
+
+      - name: Upload SARIF to GitHub using github/codeql-action/upload-sarif
+        uses: github/codeql-action/upload-sarif@v2
+        with:
+          sarif_file: ${{ steps.VCS_Diff_Lint.outputs.sarif }}
+        if: ${{ always() }}

pylintrc

@@ -0,0 +1,22 @@
+[MASTER]
+# Pickle collected data for later comparisons.
+persistent=no
+
+init-hook=
+    import os
+    import sys
+    import subprocess
+    gitrootdir = subprocess.check_output(["git", "rev-parse", "--show-toplevel"]).decode("utf-8").strip()
+    sys.path.insert(0, os.path.join(gitrootdir))
+
+[MESSAGES CONTROL]
+# Reasoning for wide warning ignore
+# ---------------------------------
+# import-error
+#     This is to work-around the issues in our diff-lint CI where we do not have
+#     all the build/runtime requirements installed.  We can ignore this error
+#     because the packaging CI would actually discover the import issues anyway.
+disable=import-error
+
+[DESIGN]
+min-public-methods=1