Used ShellCheck directly and via actionlint integration to lint bash snippets extracted from workflow run steps. Needed disables for intentional literal variables and redirect patterns.
- What worked
- Found real quoting and style issues in complex bash blocks, local binary worked reliably.
- What got in the way
- Some false positives for intentional literals and aggregation redirects required suppression comments.