From 624ed688daa4b46c98da2de3de71b3c9c41d3cb3 Mon Sep 17 00:00:00 2001 From: Rich Megginson Date: Tue, 20 Oct 2026 10:28:01 -0600 Subject: [PATCH] ci: use shared actions and lock workflow dependencies Small third-party actions create recurring dependency updates across role repositories. Replace them with composite actions in linux-system-roles/.github. Implement commit status, release, pull request, and other workflow operations with git, gh, Bash, and Python. Use pinned official GitHub actions for checkout and artifact transfer, and retain the upstream actions needed for CodeQL, Codecov, codespell, setup-python, and Testing Farm. Update the role workflow templates to use the shared actions. Document the publishing order so the actions are available before the templates are rolled out to role repositories. Generate an actions.lock file for each managed role repository. Limit organization workflows to GitHub-owned and selected external actions, and require SHA pinning. Locked commits satisfy the pinning rule for workflows covered by an actions.lock file. Assisted-by: Codex using model Sol medium 6 Signed-off-by: Rich Megginson --- .github/workflows/actions.lock | 90 +++++++++++++++++++ .github/workflows/ansible-lint.yml | 8 +- .../workflows/ansible-managed-var-comment.yml | 6 +- .github/workflows/ansible-test.yml | 8 +- .github/workflows/build_docs.yml | 15 ++-- .github/workflows/changelog_to_tag.yml | 8 +- .github/workflows/codespell.yml | 8 +- .github/workflows/markdownlint.yml | 8 +- .github/workflows/periodic_ci.yml | 38 ++------ .github/workflows/pr-title-lint.yml | 2 +- .../workflows/qemu-kvm-integration-tests.yml | 12 +-- .github/workflows/test_converting_readme.yml | 11 +-- .github/workflows/tft.yml | 10 +-- .github/workflows/woke.yml | 8 +- 14 files changed, 150 insertions(+), 82 deletions(-) create mode 100644 .github/workflows/actions.lock diff --git a/.github/workflows/actions.lock b/.github/workflows/actions.lock new file mode 100644 index 0000000..31cc476 --- /dev/null +++ b/.github/workflows/actions.lock @@ -0,0 +1,90 @@ +# This file is machine-generated by `gh actions-lock`. +# Do not edit by hand; run `gh actions-lock` to update. +# Docs: https://gh.io/actions-lockfile +version: 'v0.0.3' +workflows: + '.github/workflows/ansible-lint.yml': + - 'actions/checkout@v7.0.1' + - 'actions/setup-python@v7.0.0' + - 'linux-system-roles/.github@main' + '.github/workflows/ansible-managed-var-comment.yml': + - 'actions/checkout@v7.0.1' + - 'linux-system-roles/.github@main' + '.github/workflows/ansible-test.yml': + - 'actions/checkout@v7.0.1' + - 'actions/setup-python@v7.0.0' + - 'linux-system-roles/.github@main' + '.github/workflows/build_docs.yml': + - 'actions/checkout@v7.0.1' + - 'actions/download-artifact@v8.0.2' + - 'actions/upload-artifact@v7.0.2' + - 'linux-system-roles/.github@main' + '.github/workflows/changelog_to_tag.yml': + - 'actions/checkout@v7.0.1' + - 'linux-system-roles/.github@main' + '.github/workflows/citest-instructions.yml': [] + '.github/workflows/citest.yml': [] + '.github/workflows/codespell.yml': + - 'actions/checkout@v7.0.1' + - 'codespell-project/actions-codespell@v2.4.3' + - 'linux-system-roles/.github@main' + '.github/workflows/markdownlint.yml': + - 'actions/checkout@v7.0.1' + - 'linux-system-roles/.github@main' + '.github/workflows/periodic_ci.yml': + - 'actions/checkout@v7.0.1' + - 'linux-system-roles/.github@main' + '.github/workflows/pr-title-lint.yml': + - 'actions/checkout@v7.0.1' + '.github/workflows/qemu-kvm-integration-tests.yml': + - 'actions/checkout@v7.0.1' + - 'actions/upload-artifact@v7.0.2' + - 'linux-system-roles/.github@main' + '.github/workflows/test_converting_readme.yml': + - 'actions/checkout@v7.0.1' + - 'actions/upload-artifact@v7.0.2' + - 'linux-system-roles/.github@main' + '.github/workflows/tft.yml': + - 'actions/checkout@v7.0.1' + - 'linux-system-roles/.github@main' + - 'sclorg/testing-farm-as-github-action@v4.3.1' + '.github/workflows/tft_citest_bad.yml': [] + '.github/workflows/woke.yml': + - 'actions/checkout@v7.0.1' + - 'linux-system-roles/.github@main' +dependencies: + 'actions/checkout@v7.0.1': + ref: 'v7.0.1' + commit: 'sha1-3d3c42e5aac5ba805825da76410c181273ba90b1' + owner_id: 44036562 + repo_id: 197814629 + 'actions/download-artifact@v8.0.2': + ref: 'v8.0.2' + commit: 'sha1-9000827ccba6bdab643e8b6fd33ac0654aef8333' + owner_id: 44036562 + repo_id: 192626254 + 'actions/setup-python@v7.0.0': + ref: 'v7.0.0' + commit: 'sha1-5fda3b95a4ea91299a34e894583c3862153e4b97' + owner_id: 44036562 + repo_id: 192625525 + 'actions/upload-artifact@v7.0.2': + ref: 'v7.0.2' + commit: 'sha1-cf430e030ddbb5b0abf93d22962f4752f3646cd9' + owner_id: 44036562 + repo_id: 192625955 + 'codespell-project/actions-codespell@v2.4.3': + ref: 'v2.4.3' + commit: 'sha1-e3258cca84ce02b0bb36a3d41f2c18f719a0cc1a' + owner_id: 39140587 + repo_id: 263411323 + 'linux-system-roles/.github@main': + ref: 'main' + commit: 'sha1-816f2a5bf5cb01d001c3f6b5fab101de24bfc9d0' + owner_id: 28014670 + repo_id: 320092621 + 'sclorg/testing-farm-as-github-action@v4.3.1': + ref: 'v4.3.1' + commit: 'sha1-230555baceb860aa468d216f1822974836b965d1' + owner_id: 9047960 + repo_id: 446743009 diff --git a/.github/workflows/ansible-lint.yml b/.github/workflows/ansible-lint.yml index 48a8178..ceccc67 100644 --- a/.github/workflows/ansible-lint.yml +++ b/.github/workflows/ansible-lint.yml @@ -45,7 +45,7 @@ jobs: - name: Set commit status as pending if: github.event_name == 'issue_comment' - uses: myrotvorets/set-commit-status-action@7f84e174036426c90737dbfa32e9fd56859f93d0 # master + uses: linux-system-roles/.github/github-actions/commit-status@main with: sha: ${{ steps.head_sha_context.outputs.head_sha }} status: pending @@ -60,7 +60,7 @@ jobs: sudo apt install -y git - name: Checkout repo - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 + uses: actions/checkout@v7.0.1 with: persist-credentials: false ref: ${{ steps.head_sha_context.outputs.head_sha || github.sha }} @@ -71,7 +71,7 @@ jobs: pip3 install "git+https://github.com/linux-system-roles/tox-lsr@bfd11b23a1ed56388ea7ab8263d30e3172553a7c" - name: Set up Python - uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7 + uses: actions/setup-python@v7.0.0 with: python-version: ${{ matrix.versions.python }} @@ -88,7 +88,7 @@ jobs: - name: Set final commit status if: always() && github.event_name == 'issue_comment' && steps.head_sha_context.outputs.head_sha != '' - uses: myrotvorets/set-commit-status-action@7f84e174036426c90737dbfa32e9fd56859f93d0 # master + uses: linux-system-roles/.github/github-actions/commit-status@main with: sha: ${{ steps.head_sha_context.outputs.head_sha }} status: ${{ job.status }} diff --git a/.github/workflows/ansible-managed-var-comment.yml b/.github/workflows/ansible-managed-var-comment.yml index 541e0e0..bc2fe26 100644 --- a/.github/workflows/ansible-managed-var-comment.yml +++ b/.github/workflows/ansible-managed-var-comment.yml @@ -33,7 +33,7 @@ jobs: - name: Set commit status as pending if: github.event_name == 'issue_comment' - uses: myrotvorets/set-commit-status-action@7f84e174036426c90737dbfa32e9fd56859f93d0 # master + uses: linux-system-roles/.github/github-actions/commit-status@main with: sha: ${{ steps.head_sha_context.outputs.head_sha }} status: pending @@ -49,7 +49,7 @@ jobs: sudo apt install -y git - name: Checkout repo - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 + uses: actions/checkout@v7.0.1 with: persist-credentials: false ref: ${{ steps.head_sha_context.outputs.head_sha || github.sha }} @@ -66,7 +66,7 @@ jobs: - name: Set final commit status if: always() && github.event_name == 'issue_comment' && steps.head_sha_context.outputs.head_sha != '' - uses: myrotvorets/set-commit-status-action@7f84e174036426c90737dbfa32e9fd56859f93d0 # master + uses: linux-system-roles/.github/github-actions/commit-status@main with: sha: ${{ steps.head_sha_context.outputs.head_sha }} status: ${{ job.status }} diff --git a/.github/workflows/ansible-test.yml b/.github/workflows/ansible-test.yml index 4c1ff5c..f6c9906 100644 --- a/.github/workflows/ansible-test.yml +++ b/.github/workflows/ansible-test.yml @@ -47,7 +47,7 @@ jobs: - name: Set commit status as pending if: github.event_name == 'issue_comment' - uses: myrotvorets/set-commit-status-action@7f84e174036426c90737dbfa32e9fd56859f93d0 # master + uses: linux-system-roles/.github/github-actions/commit-status@main with: sha: ${{ steps.head_sha_context.outputs.head_sha }} status: pending @@ -63,7 +63,7 @@ jobs: sudo apt install -y git - name: Checkout repo - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 + uses: actions/checkout@v7.0.1 with: persist-credentials: false ref: ${{ steps.head_sha_context.outputs.head_sha || github.sha }} @@ -74,7 +74,7 @@ jobs: pip3 install "git+https://github.com/linux-system-roles/tox-lsr@bfd11b23a1ed56388ea7ab8263d30e3172553a7c" - name: Set up Python - uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7 + uses: actions/setup-python@v7.0.0 with: python-version: ${{ matrix.versions.python }} @@ -89,7 +89,7 @@ jobs: - name: Set final commit status if: always() && github.event_name == 'issue_comment' && steps.head_sha_context.outputs.head_sha != '' - uses: myrotvorets/set-commit-status-action@7f84e174036426c90737dbfa32e9fd56859f93d0 # master + uses: linux-system-roles/.github/github-actions/commit-status@main with: sha: ${{ steps.head_sha_context.outputs.head_sha }} status: ${{ job.status }} diff --git a/.github/workflows/build_docs.yml b/.github/workflows/build_docs.yml index 22cb0b0..01f1e12 100644 --- a/.github/workflows/build_docs.yml +++ b/.github/workflows/build_docs.yml @@ -19,7 +19,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Check out README and Pandoc template - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 + uses: actions/checkout@v7.0.1 with: persist-credentials: false sparse-checkout: | @@ -52,7 +52,7 @@ jobs: run: sed -i '1,8 {/^\[\!.*actions\/workflows/d}' README.md - name: Convert README.md to HTML and save to the version directory - uses: docker://pandoc/core@sha256:c7ae8ec017f748173d102c13e41d3daf91082738bdc6c65567832bf6eedf3f3a + uses: linux-system-roles/.github/github-actions/pandoc@main with: args: >- --from gfm --to html5 --toc --shift-heading-level-by=-1 @@ -60,7 +60,7 @@ jobs: --output ${{ env.RELEASE_VERSION }}/README.html README.md - name: Upload docs HTML artifact - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 + uses: actions/upload-artifact@v7.0.2 with: name: docs-html path: ${{ env.RELEASE_VERSION }}/README.html @@ -69,6 +69,7 @@ jobs: needs: build_docs runs-on: ubuntu-latest permissions: + actions: read contents: write steps: - name: Update pip, git @@ -78,7 +79,7 @@ jobs: sudo apt install -y git - name: Check out code - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 + uses: actions/checkout@v7.0.1 with: persist-credentials: true # needed for docs branch initialization push fetch-depth: 0 @@ -102,7 +103,7 @@ jobs: fi - name: Checkout the docs branch - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 + uses: actions/checkout@v7.0.1 with: ref: docs persist-credentials: true # needed for commit and push @@ -126,7 +127,7 @@ jobs: fi - name: Download docs HTML artifact - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1 + uses: actions/download-artifact@v8.0.2 with: name: docs-html path: ${{ env.RELEASE_VERSION }} @@ -145,7 +146,7 @@ jobs: git commit -m "Update README.html for ${{ env.RELEASE_VERSION }}" - name: Push changes - uses: ad-m/github-push-action@881a6320fdb16eb5318c5054f31c218aec2b324c # master + uses: linux-system-roles/.github/github-actions/git-push@main with: github_token: ${{ secrets.GITHUB_TOKEN }} branch: docs diff --git a/.github/workflows/changelog_to_tag.yml b/.github/workflows/changelog_to_tag.yml index 34f271a..a964ebe 100644 --- a/.github/workflows/changelog_to_tag.yml +++ b/.github/workflows/changelog_to_tag.yml @@ -22,7 +22,7 @@ jobs: sudo apt install -y git - name: checkout PR - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 + uses: actions/checkout@v7.0.1 with: persist-credentials: false @@ -71,7 +71,7 @@ jobs: echo "tagname=$_tagname" >> "$GITHUB_OUTPUT" echo "branch=$_branch" >> "$GITHUB_OUTPUT" - name: Create tag - uses: mathieudutour/github-tag-action@af99e60ce8132224b8e6ebab5023449fe256ed46 # v7 + uses: linux-system-roles/.github/github-actions/tag@main with: github_token: ${{ secrets.GITHUB_TOKEN }} custom_tag: ${{ steps.tag.outputs.tagname }} @@ -79,7 +79,7 @@ jobs: - name: Create Release id: create_release - uses: ncipollo/release-action@339a81892b84b4eeb0f6e744e4574d79d0d9b8dd # v1.21.0 + uses: linux-system-roles/.github/github-actions/release@main with: tag: ${{ steps.tag.outputs.tagname }} name: Version ${{ steps.tag.outputs.tagname }} @@ -87,7 +87,7 @@ jobs: makeLatest: true - name: Publish role to Galaxy - uses: robertdebock/galaxy-action@7d89099e09f4385ec4b53eb58c0d120f1ad806dd # 1.2.1 + uses: linux-system-roles/.github/github-actions/galaxy-import@main with: galaxy_api_key: ${{ secrets.galaxy_api_key }} git_branch: ${{ steps.tag.outputs.branch }} diff --git a/.github/workflows/codespell.yml b/.github/workflows/codespell.yml index ca6953a..d37c5da 100644 --- a/.github/workflows/codespell.yml +++ b/.github/workflows/codespell.yml @@ -35,7 +35,7 @@ jobs: - name: Set commit status as pending if: github.event_name == 'issue_comment' - uses: myrotvorets/set-commit-status-action@7f84e174036426c90737dbfa32e9fd56859f93d0 # master + uses: linux-system-roles/.github/github-actions/commit-status@main with: sha: ${{ steps.head_sha_context.outputs.head_sha }} status: pending @@ -44,17 +44,17 @@ jobs: targetUrl: ${{ github.server_url }}/${{ github.repository }}/actions/runs/${{ github.run_id }}/job/${{ job.check_run_id }} - name: Checkout - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 + uses: actions/checkout@v7.0.1 with: persist-credentials: false ref: ${{ steps.head_sha_context.outputs.head_sha || github.sha }} - name: Codespell - uses: codespell-project/actions-codespell@e3258cca84ce02b0bb36a3d41f2c18f719a0cc1a # v2.4.3 + uses: codespell-project/actions-codespell@v2.4.3 - name: Set final commit status if: always() && github.event_name == 'issue_comment' && steps.head_sha_context.outputs.head_sha != '' - uses: myrotvorets/set-commit-status-action@7f84e174036426c90737dbfa32e9fd56859f93d0 # master + uses: linux-system-roles/.github/github-actions/commit-status@main with: sha: ${{ steps.head_sha_context.outputs.head_sha }} status: ${{ job.status }} diff --git a/.github/workflows/markdownlint.yml b/.github/workflows/markdownlint.yml index c65e3f9..766f158 100644 --- a/.github/workflows/markdownlint.yml +++ b/.github/workflows/markdownlint.yml @@ -34,7 +34,7 @@ jobs: - name: Set commit status as pending if: github.event_name == 'issue_comment' - uses: myrotvorets/set-commit-status-action@7f84e174036426c90737dbfa32e9fd56859f93d0 # master + uses: linux-system-roles/.github/github-actions/commit-status@main with: sha: ${{ steps.head_sha_context.outputs.head_sha }} status: pending @@ -49,7 +49,7 @@ jobs: sudo apt install -y git - name: Check out code - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 + uses: actions/checkout@v7.0.1 with: persist-credentials: false ref: ${{ steps.head_sha_context.outputs.head_sha || github.sha }} @@ -57,7 +57,7 @@ jobs: # CHANGELOG.md is generated automatically from PR titles and descriptions # It might have issues but they are not critical - name: Lint all markdown files except for CHANGELOG.md - uses: docker://avtodev/markdown-lint:master + uses: linux-system-roles/.github/github-actions/markdownlint@main with: args: >- --ignore=CHANGELOG.md @@ -66,7 +66,7 @@ jobs: - name: Set final commit status if: always() && github.event_name == 'issue_comment' && steps.head_sha_context.outputs.head_sha != '' - uses: myrotvorets/set-commit-status-action@7f84e174036426c90737dbfa32e9fd56859f93d0 # master + uses: linux-system-roles/.github/github-actions/commit-status@main with: sha: ${{ steps.head_sha_context.outputs.head_sha }} status: ${{ job.status }} diff --git a/.github/workflows/periodic_ci.yml b/.github/workflows/periodic_ci.yml index d53c99f..3bbaaf1 100644 --- a/.github/workflows/periodic_ci.yml +++ b/.github/workflows/periodic_ci.yml @@ -32,7 +32,7 @@ jobs: sudo apt install -y git - name: Checkout latest code - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 + uses: actions/checkout@v7.0.1 with: persist-credentials: true # needed for commit and push fetch-depth: 0 @@ -53,35 +53,11 @@ jobs: git push -f --set-upstream origin ${{ env.BRANCH_NAME }} - name: Create and comment pull request - uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9 + uses: linux-system-roles/.github/github-actions/periodic-ci-pr@main with: github-token: ${{ secrets.GH_PUSH_TOKEN }} - script: | - const head = [context.repo.owner, ":", "${{ env.BRANCH_NAME }}"].join(""); - const response = await github.rest.pulls.list({ - owner: context.repo.owner, - repo: context.repo.repo, - head: head, - base: context.ref, - state: "open" - }); - let pr_number = ''; - if (response.data.length === 0) { - pr_number = (await github.rest.pulls.create({ - owner: context.repo.owner, - repo: context.repo.repo, - title: "${{ env.COMMIT_MESSAGE }}", - body: "${{ env.BODY_MESSAGE }}", - head: "${{ env.BRANCH_NAME }}", - base: context.ref, - draft: true - })).data.number; - } else { - pr_number = response.data[0].number; - } - github.rest.issues.createComment({ - owner: context.repo.owner, - repo: context.repo.repo, - issue_number: pr_number, - body: "${{ env.COMMENT }}", - }); + branch: ${{ env.BRANCH_NAME }} + base: ${{ github.ref_name }} + title: ${{ env.COMMIT_MESSAGE }} + body: ${{ env.BODY_MESSAGE }} + comment: ${{ env.COMMENT }} diff --git a/.github/workflows/pr-title-lint.yml b/.github/workflows/pr-title-lint.yml index 2bea365..488c24f 100644 --- a/.github/workflows/pr-title-lint.yml +++ b/.github/workflows/pr-title-lint.yml @@ -19,7 +19,7 @@ jobs: if: inputs.requested || github.event_name != 'issue_comment' runs-on: ubuntu-latest steps: - - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 + - uses: actions/checkout@v7.0.1 with: persist-credentials: false fetch-depth: 0 diff --git a/.github/workflows/qemu-kvm-integration-tests.yml b/.github/workflows/qemu-kvm-integration-tests.yml index 2f5248a..4dfb898 100644 --- a/.github/workflows/qemu-kvm-integration-tests.yml +++ b/.github/workflows/qemu-kvm-integration-tests.yml @@ -63,7 +63,7 @@ jobs: - name: Set commit status as pending if: github.event_name == 'issue_comment' - uses: myrotvorets/set-commit-status-action@7f84e174036426c90737dbfa32e9fd56859f93d0 # master + uses: linux-system-roles/.github/github-actions/commit-status@main with: sha: ${{ steps.head_sha_context.outputs.head_sha }} status: pending @@ -72,7 +72,7 @@ jobs: targetUrl: ${{ github.server_url }}/${{ github.repository }}/actions/runs/${{ github.run_id }}/job/${{ job.check_run_id }} - name: Checkout repo - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 + uses: actions/checkout@v7.0.1 with: persist-credentials: false ref: ${{ steps.head_sha_context.outputs.head_sha || github.sha }} @@ -151,7 +151,7 @@ jobs: - name: Ensure use of podman 5 if: steps.check_platform.outputs.supported && steps.check_podman_version.outputs.need_podman_update == 1 - uses: redhat-actions/podman-install@5b0fb16319979de14e2c7c2c1cc27c98f107ae52 # main + uses: linux-system-roles/.github/github-actions/podman-install@main - name: Configure tox-lsr if: steps.check_platform.outputs.supported @@ -235,7 +235,7 @@ jobs: - name: Upload test logs on failure if: failure() - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 + uses: actions/upload-artifact@v7.0.2 with: name: "logs-${{ matrix.scenario.image }}-${{ matrix.scenario.env }}" path: | @@ -261,7 +261,7 @@ jobs: - name: Set final commit status if: always() && github.event_name == 'issue_comment' && steps.head_sha_context.outputs.head_sha != '' && (steps.check_platform.outputs.supported || failure()) - uses: myrotvorets/set-commit-status-action@7f84e174036426c90737dbfa32e9fd56859f93d0 # master + uses: linux-system-roles/.github/github-actions/commit-status@main with: sha: ${{ steps.head_sha_context.outputs.head_sha }} status: ${{ job.status }} @@ -271,7 +271,7 @@ jobs: - name: Set commit status as success with a description that platform is skipped if: ${{ success() && github.event_name == 'issue_comment' && steps.check_platform.outputs.supported == '' }} - uses: myrotvorets/set-commit-status-action@7f84e174036426c90737dbfa32e9fd56859f93d0 # master + uses: linux-system-roles/.github/github-actions/commit-status@main with: sha: ${{ steps.head_sha_context.outputs.head_sha }} status: success diff --git a/.github/workflows/test_converting_readme.yml b/.github/workflows/test_converting_readme.yml index b891137..2520aa6 100644 --- a/.github/workflows/test_converting_readme.yml +++ b/.github/workflows/test_converting_readme.yml @@ -38,7 +38,7 @@ jobs: - name: Set commit status as pending if: github.event_name == 'issue_comment' - uses: myrotvorets/set-commit-status-action@7f84e174036426c90737dbfa32e9fd56859f93d0 # master + uses: linux-system-roles/.github/github-actions/commit-status@main with: sha: ${{ steps.head_sha_context.outputs.head_sha }} status: pending @@ -53,7 +53,7 @@ jobs: sudo apt install -y git - name: Check out code - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 + uses: actions/checkout@v7.0.1 with: persist-credentials: false ref: ${{ steps.head_sha_context.outputs.head_sha || github.sha }} @@ -62,22 +62,23 @@ jobs: run: sed -i '1,8 {/^\[\!.*actions\/workflows/d}' README.md - name: Convert README.md to HTML - uses: docker://pandoc/core:latest + uses: linux-system-roles/.github/github-actions/pandoc@main with: + image: pandoc/core@sha256:62518bfb6833705dc90a1634d8d879299bd820b3f74ad3b32fba8b618452553a args: >- --from gfm --to html5 --toc --shift-heading-level-by=-1 --template .pandoc_template.html5 --output README.html README.md - name: Upload README.html as an artifact - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 + uses: actions/upload-artifact@v7.0.2 with: name: README.html path: README.html - name: Set final commit status if: always() && github.event_name == 'issue_comment' && steps.head_sha_context.outputs.head_sha != '' - uses: myrotvorets/set-commit-status-action@7f84e174036426c90737dbfa32e9fd56859f93d0 # master + uses: linux-system-roles/.github/github-actions/commit-status@main with: sha: ${{ steps.head_sha_context.outputs.head_sha }} status: ${{ job.status }} diff --git a/.github/workflows/tft.yml b/.github/workflows/tft.yml index 184b963..6e37f7b 100644 --- a/.github/workflows/tft.yml +++ b/.github/workflows/tft.yml @@ -56,7 +56,7 @@ jobs: GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} - name: Checkout PR - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 + uses: actions/checkout@v7.0.1 with: persist-credentials: false ref: ${{ steps.head_sha.outputs.head_sha || github.sha }} @@ -143,7 +143,7 @@ jobs: - name: Set commit status as pending if: contains(needs.prepare_vars.outputs.supported_platforms, matrix.platform) - uses: myrotvorets/set-commit-status-action@7f84e174036426c90737dbfa32e9fd56859f93d0 # master + uses: linux-system-roles/.github/github-actions/commit-status@main with: sha: ${{ steps.head_sha_context.outputs.head_sha }} status: pending @@ -166,7 +166,7 @@ jobs: - name: Set commit status as success with a description that platform is skipped if: "!contains(needs.prepare_vars.outputs.supported_platforms, matrix.platform)" - uses: myrotvorets/set-commit-status-action@7f84e174036426c90737dbfa32e9fd56859f93d0 # master + uses: linux-system-roles/.github/github-actions/commit-status@main with: sha: ${{ steps.head_sha_context.outputs.head_sha }} status: success @@ -175,7 +175,7 @@ jobs: targetUrl: ${{ github.server_url }}/${{ github.repository }}/actions/runs/${{ github.run_id }}/job/${{ job.check_run_id }} - name: Run test in testing farm - uses: sclorg/testing-farm-as-github-action@230555baceb860aa468d216f1822974836b965d1 # v4.3.1 + uses: sclorg/testing-farm-as-github-action@v4.3.1 if: contains(needs.prepare_vars.outputs.supported_platforms, matrix.platform) with: git_ref: main @@ -204,7 +204,7 @@ jobs: tmt_plan_filter: "tag:playbooks_parallel,template" - name: Set final commit status - uses: myrotvorets/set-commit-status-action@7f84e174036426c90737dbfa32e9fd56859f93d0 # master + uses: linux-system-roles/.github/github-actions/commit-status@main if: always() && contains(needs.prepare_vars.outputs.supported_platforms, matrix.platform) with: sha: ${{ steps.head_sha_context.outputs.head_sha }} diff --git a/.github/workflows/woke.yml b/.github/workflows/woke.yml index a65b0ce..445389f 100644 --- a/.github/workflows/woke.yml +++ b/.github/workflows/woke.yml @@ -35,7 +35,7 @@ jobs: - name: Set commit status as pending if: github.event_name == 'issue_comment' - uses: myrotvorets/set-commit-status-action@7f84e174036426c90737dbfa32e9fd56859f93d0 # master + uses: linux-system-roles/.github/github-actions/commit-status@main with: sha: ${{ steps.head_sha_context.outputs.head_sha }} status: pending @@ -44,14 +44,14 @@ jobs: targetUrl: ${{ github.server_url }}/${{ github.repository }}/actions/runs/${{ github.run_id }}/job/${{ job.check_run_id }} - name: Checkout - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 + uses: actions/checkout@v7.0.1 with: persist-credentials: false ref: ${{ steps.head_sha_context.outputs.head_sha || github.sha }} - name: Run lsr-woke-action # Originally, uses: get-woke/woke-action@v0 - uses: linux-system-roles/lsr-woke-action@33e72e28c826f05aaee08d0b70c7d2cd9e0a39a7 # main + uses: linux-system-roles/.github/github-actions/woke@main with: woke-args: "-c https://raw.githubusercontent.com/linux-system-roles/tox-lsr/main/src/tox_lsr/config_files/woke.yml --count-only-error-for-failure" # Cause the check to fail on any broke rules @@ -59,7 +59,7 @@ jobs: - name: Set final commit status if: always() && github.event_name == 'issue_comment' && steps.head_sha_context.outputs.head_sha != '' - uses: myrotvorets/set-commit-status-action@7f84e174036426c90737dbfa32e9fd56859f93d0 # master + uses: linux-system-roles/.github/github-actions/commit-status@main with: sha: ${{ steps.head_sha_context.outputs.head_sha }} status: ${{ job.status }}