Update from update/networkservicemesh/cmd-nse-firewall-vpp #16841

	---
	name: ci
	on:
	pull_request:
	push:
	branches:
	- "release/*"
	jobs:
	yamllint:
	name: yamllint
	runs-on: ubuntu-latest
	steps:
	- name: Check out code into the Go module directory
	uses: actions/checkout@v2
	- name: yaml-lint
	uses: ibiqlik/action-yamllint@v1
	with:
	config_file: .yamllint.yml
	strict: true
	shellcheck:
	name: shellcheck
	runs-on: ubuntu-latest
	steps:
	- uses: actions/checkout@v2
	- name: shellcheck
	uses: fkautz/[email protected]
	image-check:
	name: Check that image is pullable
	runs-on: ubuntu-latest
	if: ${{ contains(github.head_ref, 'update/') }}
	steps:
	- name: Check out code into the Go module directory
	uses: actions/checkout@v2
	- name: Check images
	uses: nick-invision/retry@v2
	with:
	timeout_minutes: 1
	max_attempts: 3
	retry_on: timeout
	command: \|
	repoName=${GITHUB_REF#refs/heads/update/networkservicemesh/}
	images=$(grep -roh 'apps' -e "ghcr.io/networkservicemesh/ci/${repoName}.*")
	for image in $images; do
	docker pull $image
	done
	diff-correctness-check:
	name: diff-correctness-check
	runs-on: ubuntu-latest
	if: ${{ github.actor == 'nsmbot' }}
	steps:
	- name: Check out the code
	uses: actions/checkout@v2
	with:
	fetch-depth: 0
	ref: ${{ github.event.pull_request.head.sha }}
	- name: Only allow yaml files
	run: \|
	BRANCH_POINT=$(git merge-base ${{github.event.pull_request.base.sha}} HEAD)
	echo "branch point: $BRANCH_POINT"
	find . -type f -not -path "./.github/" ! -name '.yaml' ! -name '*.yml' -exec git diff "${{ github.event.pull_request.head.sha }}".."$BRANCH_POINT" --exit-code -- {} +

Provide feedback