Switch super-linter from deny-list to allow-list

Signed-off-by: Gregor Zeitlinger <gregor.zeitlinger@grafana.com>

Author: zeitlinger

.github/config/super-linter.env

@@ -1,31 +1,26 @@
 FILTER_REGEX_EXCLUDE=(.*renovate-tracked-deps\.json|gradlew|buildscripts/spotless.license.java)
 IGNORE_GITIGNORED_FILES=true
 LOG_LEVEL=ERROR
-# conflicts with prettier
-VALIDATE_BIOME_FORMAT=false
-# conflicts with prettier
-VALIDATE_BIOME_LINT=false
-# disable kubernetes linter - complains about resource limits, etc
-VALIDATE_CHECKOV=false
-VALIDATE_DOCKERFILE_HADOLINT=false
-VALIDATE_GIT_COMMITLINT=false
-VALIDATE_GOOGLE_JAVA_FORMAT=false
-# will migrate to kotlin gradle later
-VALIDATE_GROOVY=false
-# is done by gradle
-VALIDATE_JAVA=false
-# we have many duplicate code in our codebase for demo purposes
-VALIDATE_JSCPD=false
-# all dependencies are updated by renovate
-VALIDATE_TRIVY=false
 
-FIX_ENV=true
-FIX_GITHUB_ACTIONS_ZIZMOR=true
-FIX_GO=true
-FIX_JAVASCRIPT_PRETTIER=true
-FIX_JSON=true
-FIX_JSONC=true
-FIX_JSONC_PRETTIER=true
+# Keys MUST be sorted alphabetically — dotenv-linter enforces this in CI.
+
+# --- Allow-list: only these linters run ---
+# (switching from deny-list to allow-list for clarity and performance)
+
+VALIDATE_BASH=true
+VALIDATE_EDITORCONFIG=true
+VALIDATE_GITHUB_ACTIONS=true
+VALIDATE_GIT_MERGE_CONFLICT_MARKERS=true
+VALIDATE_JSON_PRETTIER=true
+VALIDATE_MARKDOWN=true
+VALIDATE_MARKDOWN_PRETTIER=true
+VALIDATE_RENOVATE=true
+VALIDATE_SHELL_SHFMT=true
+VALIDATE_SPELL_CODESPELL=true
+VALIDATE_XML=true
+VALIDATE_YAML_PRETTIER=true
+
+# --- Autofix ---
 FIX_JSON_PRETTIER=true
 FIX_MARKDOWN=true
 FIX_MARKDOWN_PRETTIER=true