ci: format all YAML with `yq`

`yq` is the YAML query tool, used for manipulating YAML files. This
change uses the following command to read in and to pretty-print every
YAML file in this repository:

    for x in $(find . -name '*.yaml'); do
        yq -i -P -oy $x
    done

This makes it a bit easier to automate synchronisation between staging
and upstream, as yq always pretty-prints the entire document when
manipulating files.

Signed-off-by: Chris Kay <chris.kay@arm.com>
Change-Id: If973766fa26500d5320612422d1b4999b23439d3
diff --git a/tf-a-gerrit-tforg-l2.yaml b/tf-a-gerrit-tforg-l2.yaml
index df24f88..967b946 100644
--- a/tf-a-gerrit-tforg-l2.yaml
+++ b/tf-a-gerrit-tforg-l2.yaml
@@ -8,192 +8,190 @@
       Job that triggers for every TF-A patch approved with the Allow-CI+2
       label on review.trustedfirmware.org.
     properties:
-    - throttle:
-        option: project
-        enabled: true
-        max-total: 5
-    - build-discarder:
-        days-to-keep: 15
+      - throttle:
+          option: project
+          enabled: true
+          max-total: 5
+      - build-discarder:
+          days-to-keep: 15
     parameters:
-        - string:
-            name: GERRIT_PROJECT
-            default: 'TF-A/trusted-firmware-a'
-        - string:
-            name: GERRIT_BRANCH
-            default: 'refs/heads/integration'
-        - string:
-            name: GERRIT_REFSPEC
-            default: '+refs/heads/integration:refs/remotes/origin/integration'
-        - string:
-            name: GERRIT_PATCHSET_NUMBER
-            default: ''
-        - string:
-            name: GERRIT_CHANGE_NUMBER
-            default: ''
-        - string:
-            name: TF_GERRIT_REFSPEC
-            default: ${GERRIT_REFSPEC}
-            description: 'Parameter only used by the clone script'
-        - string:
-            name: TFTF_GERRIT_PROJECT
-            default: 'TF-A/tf-a-tests'
-        - string:
-            name: TFTF_GERRIT_BRANCH
-            default: 'refs/heads/master'
-        - string:
-            name: TFTF_GERRIT_REFSPEC
-            default: '+refs/heads/master:refs/remotes/origin/master'
-        - string:
-           name: SPM_REFSPEC
-           default: '+refs/heads/master:refs/remotes/origin/master'
-           description: |
-             SPM(Hafnium) refspec to use. The master branch is used by default.
-        - string:
-           name: RMM_REFSPEC
-           default: '+refs/heads/main:refs/remotes/origin/main'
-           description: |
-             tf-rmm refspec to use. The main branch is used by default.
-        - string:
-            name: CI_REFSPEC
-            default: '+refs/heads/master:refs/remotes/origin/master'
-        - string:
-            name: JOBS_REFSPEC
-            default: 'refs/heads/master'
-            description: |
-              tf-a-job-configs refspec to use. The master branch is used by default.
-        - string:
-            name: MBEDTLS_URL
-            default: 'https://github.com/Mbed-TLS/mbedtls/archive/mbedtls-3.6.3.tar.gz'
-        - string:
-            name: LAVA_RETRIES
-            default: 2
-            description: |
-              Number of tries submitting job to LAVA in case it fails (stopgap measure against nondeterministic failures)
-        - string:
-            name: SHARE_FOLDER
-            default: '/srv/shared/${JOB_NAME}/${BUILD_NUMBER}'
-            description: 'Folder containing shared repositories for downstream pipeline jobs'
+      - string:
+          name: GERRIT_PROJECT
+          default: TF-A/trusted-firmware-a
+      - string:
+          name: GERRIT_BRANCH
+          default: refs/heads/integration
+      - string:
+          name: GERRIT_REFSPEC
+          default: +refs/heads/integration:refs/remotes/origin/integration
+      - string:
+          name: GERRIT_PATCHSET_NUMBER
+          default: ""
+      - string:
+          name: GERRIT_CHANGE_NUMBER
+          default: ""
+      - string:
+          name: TF_GERRIT_REFSPEC
+          default: ${GERRIT_REFSPEC}
+          description: Parameter only used by the clone script
+      - string:
+          name: TFTF_GERRIT_PROJECT
+          default: TF-A/tf-a-tests
+      - string:
+          name: TFTF_GERRIT_BRANCH
+          default: refs/heads/master
+      - string:
+          name: TFTF_GERRIT_REFSPEC
+          default: +refs/heads/master:refs/remotes/origin/master
+      - string:
+          name: SPM_REFSPEC
+          default: +refs/heads/master:refs/remotes/origin/master
+          description: |
+            SPM(Hafnium) refspec to use. The master branch is used by default.
+      - string:
+          name: RMM_REFSPEC
+          default: +refs/heads/main:refs/remotes/origin/main
+          description: |
+            tf-rmm refspec to use. The main branch is used by default.
+      - string:
+          name: CI_REFSPEC
+          default: +refs/heads/master:refs/remotes/origin/master
+      - string:
+          name: JOBS_REFSPEC
+          default: refs/heads/master
+          description: |
+            tf-a-job-configs refspec to use. The master branch is used by default.
+      - string:
+          name: MBEDTLS_URL
+          default: https://github.com/Mbed-TLS/mbedtls/archive/mbedtls-3.6.3.tar.gz
+      - string:
+          name: LAVA_RETRIES
+          default: 2
+          description: |
+            Number of tries submitting job to LAVA in case it fails (stopgap measure against nondeterministic failures)
+      - string:
+          name: SHARE_FOLDER
+          default: /srv/shared/${JOB_NAME}/${BUILD_NUMBER}
+          description: Folder containing shared repositories for downstream pipeline jobs
     wrappers:
       - credentials-binding:
           - ssh-user-private-key:
               credential-id: TFA_CI_BOT_USER_SSH_KEY
               key-file-variable: CI_BOT_KEY
               username-variable: CI_BOT_USERNAME
-              passphrase-variable: ''
+              passphrase-variable: ""
       - workspace-cleanup
       - timestamps
     builders:
-    - shell:
-        !include-raw: scripts/clone.sh
-    - shell: |
-        #!/bin/bash
-        set -e
-        cat << EOF > env.param
-        GERRIT_PATCHSET_NUMBER=${GERRIT_PATCHSET_NUMBER}
-        GERRIT_CHANGE_NUMBER=${GERRIT_CHANGE_NUMBER}
-        GERRIT_HOST=${GERRIT_HOST}
-        QA_SERVER_PROJECT=${JOB_NAME}
-        QA_SERVER_VERSION=${BUILD_NUMBER}
-        TF_GERRIT_PROJECT=${GERRIT_PROJECT}
-        TF_GERRIT_BRANCH=${GERRIT_BRANCH}
-        TF_GERRIT_REFSPEC=${GERRIT_REFSPEC}
-        SHARE_FOLDER=${SHARE_FOLDER}
-        EOF
-    - multijob:
-        condition: COMPLETED
-        name: Carry out level 1 tests
-        projects:
-        - kill-phase-on: NEVER
-          name: tf-a-gerrit-tforg-l1
-          current-parameters: true
-          property-file: env.param
-    - multijob:
-        condition: COMPLETED
-        name: Build Trusted Firmware
-        projects:
-        - kill-phase-on: NEVER
-          name: tf-a-ci-gateway
-          current-parameters: true
-          predefined-parameters: |
-            TEST_GROUPS=tf-l2-build-fvp tf-l2-build-juno
-            TF_REFSPEC=$GERRIT_REFSPEC
-          property-file: env.param
-    - multijob:
-        condition: COMPLETED
-        name: Run platform boot tests
-        projects:
-        - kill-phase-on: NEVER
-          name: tf-a-ci-gateway
-          predefined-parameters: |
-            TEST_GROUPS=tf-l2-boot-tests-arm-plats tf-l2-boot-tests-partner-boards
-            TF_REFSPEC=$GERRIT_REFSPEC
-          property-file: env.param
-    - multijob:
-        condition: COMPLETED
-        name: TFTF tests
-        projects:
-        - kill-phase-on: NEVER
-          name: tf-a-ci-gateway
-          current-parameters: true
-          predefined-parameters: |
-            TEST_GROUPS=tftf-l1-fvp tftf-l1-juno tftf-l2-fvp-auxiliary tftf-l2-fvp-dynamiq tftf-l2-fwu tftf-l2-fvp
-            TF_REFSPEC=$GERRIT_REFSPEC
-          property-file: env.param
-    - multijob:
-        condition: COMPLETED
-        name: Boot up to the Linux shell prompt
-        projects:
-        - kill-phase-on: NEVER
-          name: tf-a-ci-gateway
-          current-parameters: true
-          predefined-parameters: |
-            TEST_GROUPS=tf-l2-boot-tests-aarch32 tf-l2-boot-tests-bl2_el3 tf-l2-boot-tests-cortex tf-l2-boot-tests-juno tf-l2-boot-tests-latest tf-l2-boot-tests-misc tf-l2-boot-tests-rootfs tf-l2-boot-tests-spm-mm spm-l2-boot-tests
-            TF_REFSPEC=$GERRIT_REFSPEC
-          property-file: env.param
-    - conditional-step:
-        condition-command: |-
-          [ "$NOMINATION_FILE" ]
-        condition-kind: shell
-        on-evaluation-failure: dont-run
-        steps:
-        - multijob:
-            condition: COMPLETED
-            name: Nominated tests
-            projects:
+      - shell: !include-raw: scripts/clone.sh
+      - shell: |
+          #!/bin/bash
+          set -e
+          cat << EOF > env.param
+          GERRIT_PATCHSET_NUMBER=${GERRIT_PATCHSET_NUMBER}
+          GERRIT_CHANGE_NUMBER=${GERRIT_CHANGE_NUMBER}
+          GERRIT_HOST=${GERRIT_HOST}
+          QA_SERVER_PROJECT=${JOB_NAME}
+          QA_SERVER_VERSION=${BUILD_NUMBER}
+          TF_GERRIT_PROJECT=${GERRIT_PROJECT}
+          TF_GERRIT_BRANCH=${GERRIT_BRANCH}
+          TF_GERRIT_REFSPEC=${GERRIT_REFSPEC}
+          SHARE_FOLDER=${SHARE_FOLDER}
+          EOF
+      - multijob:
+          condition: COMPLETED
+          name: Carry out level 1 tests
+          projects:
+            - kill-phase-on: NEVER
+              name: tf-a-gerrit-tforg-l1
+              current-parameters: true
+              property-file: env.param
+      - multijob:
+          condition: COMPLETED
+          name: Build Trusted Firmware
+          projects:
             - kill-phase-on: NEVER
               name: tf-a-ci-gateway
               current-parameters: true
               predefined-parameters: |
-                TEST_GROUPS=@$NOMINATION_FILE
+                TEST_GROUPS=tf-l2-build-fvp tf-l2-build-juno
                 TF_REFSPEC=$GERRIT_REFSPEC
               property-file: env.param
+      - multijob:
+          condition: COMPLETED
+          name: Run platform boot tests
+          projects:
+            - kill-phase-on: NEVER
+              name: tf-a-ci-gateway
+              predefined-parameters: |
+                TEST_GROUPS=tf-l2-boot-tests-arm-plats tf-l2-boot-tests-partner-boards
+                TF_REFSPEC=$GERRIT_REFSPEC
+              property-file: env.param
+      - multijob:
+          condition: COMPLETED
+          name: TFTF tests
+          projects:
+            - kill-phase-on: NEVER
+              name: tf-a-ci-gateway
+              current-parameters: true
+              predefined-parameters: |
+                TEST_GROUPS=tftf-l1-fvp tftf-l1-juno tftf-l2-fvp-auxiliary tftf-l2-fvp-dynamiq tftf-l2-fwu tftf-l2-fvp
+                TF_REFSPEC=$GERRIT_REFSPEC
+              property-file: env.param
+      - multijob:
+          condition: COMPLETED
+          name: Boot up to the Linux shell prompt
+          projects:
+            - kill-phase-on: NEVER
+              name: tf-a-ci-gateway
+              current-parameters: true
+              predefined-parameters: |
+                TEST_GROUPS=tf-l2-boot-tests-aarch32 tf-l2-boot-tests-bl2_el3 tf-l2-boot-tests-cortex tf-l2-boot-tests-juno tf-l2-boot-tests-latest tf-l2-boot-tests-misc tf-l2-boot-tests-rootfs tf-l2-boot-tests-spm-mm spm-l2-boot-tests
+                TF_REFSPEC=$GERRIT_REFSPEC
+              property-file: env.param
+      - conditional-step:
+          condition-command: '[ "$NOMINATION_FILE" ]'
+          condition-kind: shell
+          on-evaluation-failure: dont-run
+          steps:
+            - multijob:
+                condition: COMPLETED
+                name: Nominated tests
+                projects:
+                  - kill-phase-on: NEVER
+                    name: tf-a-ci-gateway
+                    current-parameters: true
+                    predefined-parameters: |
+                      TEST_GROUPS=@$NOMINATION_FILE
+                      TF_REFSPEC=$GERRIT_REFSPEC
+                    property-file: env.param
     triggers:
-    - gerrit:
-        server-name: review.trustedfirmware.org
-        trigger-on:
-          - comment-added-event:
-              approval-category: "Allow-CI"
-              approval-value: 2
-        projects:
-          - project-compare-type: PLAIN
-            project-pattern: TF-A/trusted-firmware-a
-            branches:
-              - branch-compare-type: PLAIN
-                branch-pattern: integration
-        override-votes: true
-        gerrit-build-started-verified-value: 0
-        gerrit-build-successful-verified-value: 1
-        gerrit-build-failed-verified-value: -1
-        gerrit-build-unstable-verified-value: -1
-        gerrit-build-notbuilt-verified-value: 0
-        gerrit-build-started-codereview-value: 0
-        gerrit-build-successful-codereview-value: 0
-        gerrit-build-failed-codereview-value: 0
-        gerrit-build-unstable-codereview-value: 0
-        gerrit-build-notbuilt-codereview-value: 0
-        failure-message: 'OpenCI: build failed'
-        successful-message: 'OpenCI: build successful'
-        unstable-message: 'OpenCI: build unstable'
-        notbuilt-message: 'OpenCI: no builds executed'
-        silent: false
-        silent-start: false
+      - gerrit:
+          server-name: review.trustedfirmware.org
+          trigger-on:
+            - comment-added-event:
+                approval-category: Allow-CI
+                approval-value: 2
+          projects:
+            - project-compare-type: PLAIN
+              project-pattern: TF-A/trusted-firmware-a
+              branches:
+                - branch-compare-type: PLAIN
+                  branch-pattern: integration
+          override-votes: true
+          gerrit-build-started-verified-value: 0
+          gerrit-build-successful-verified-value: 1
+          gerrit-build-failed-verified-value: -1
+          gerrit-build-unstable-verified-value: -1
+          gerrit-build-notbuilt-verified-value: 0
+          gerrit-build-started-codereview-value: 0
+          gerrit-build-successful-codereview-value: 0
+          gerrit-build-failed-codereview-value: 0
+          gerrit-build-unstable-codereview-value: 0
+          gerrit-build-notbuilt-codereview-value: 0
+          failure-message: 'OpenCI: build failed'
+          successful-message: 'OpenCI: build successful'
+          unstable-message: 'OpenCI: build unstable'
+          notbuilt-message: 'OpenCI: no builds executed'
+          silent: false
+          silent-start: false