From ebf56541b11b6f1c8a298ec6c58372282461b6f8 Mon Sep 17 00:00:00 2001 From: Rich Megginson Date: Tue, 20 Oct 2026 10:12:20 -0600 Subject: [PATCH] ci: use shared actions and lock workflow dependencies Small third-party actions create recurring dependency updates across role repositories. Replace them with composite actions in linux-system-roles/.github. Implement commit status, release, pull request, and other workflow operations with git, gh, Bash, and Python. Use pinned official GitHub actions for checkout and artifact transfer, and retain the upstream actions needed for CodeQL, Codecov, codespell, setup-python, and Testing Farm. Update the role workflow templates to use the shared actions. Document the publishing order so the actions are available before the templates are rolled out to role repositories. Generate an actions.lock file for each managed role repository. Limit organization workflows to GitHub-owned and selected external actions, and require SHA pinning. Locked commits satisfy the pinning rule for workflows covered by an actions.lock file. Assisted-by: Codex using model Sol medium 6 Signed-off-by: Rich Megginson --- .github/workflows/actions.lock | 119 ++++++++++++++++++ .github/workflows/ansible-lint.yml | 8 +- .../workflows/ansible-managed-var-comment.yml | 6 +- .github/workflows/ansible-test.yml | 8 +- .github/workflows/build_docs.yml | 15 +-- .github/workflows/changelog_to_tag.yml | 8 +- .github/workflows/codeql.yml | 12 +- .github/workflows/codespell.yml | 8 +- .github/workflows/markdownlint.yml | 8 +- .github/workflows/periodic_ci.yml | 38 ++---- .github/workflows/pr-title-lint.yml | 2 +- .github/workflows/python-unit-test.yml | 10 +- .../workflows/qemu-kvm-integration-tests.yml | 12 +- .github/workflows/shellcheck.yml | 8 +- .github/workflows/test_converting_readme.yml | 11 +- .github/workflows/tft.yml | 10 +- .github/workflows/woke.yml | 8 +- meta/collection-requirements.yml | 1 + 18 files changed, 195 insertions(+), 97 deletions(-) create mode 100644 .github/workflows/actions.lock diff --git a/.github/workflows/actions.lock b/.github/workflows/actions.lock new file mode 100644 index 00000000..6841e22f --- /dev/null +++ b/.github/workflows/actions.lock @@ -0,0 +1,119 @@ +# This file is machine-generated by `gh actions-lock`. +# Do not edit by hand; run `gh actions-lock` to update. +# Docs: https://gh.io/actions-lockfile +version: 'v0.0.3' +workflows: + '.github/workflows/ansible-lint.yml': + - 'actions/checkout@v7.0.1' + - 'actions/setup-python@v7.0.0' + - 'linux-system-roles/.github@main' + '.github/workflows/ansible-managed-var-comment.yml': + - 'actions/checkout@v7.0.1' + - 'linux-system-roles/.github@main' + '.github/workflows/ansible-test.yml': + - 'actions/checkout@v7.0.1' + - 'actions/setup-python@v7.0.0' + - 'linux-system-roles/.github@main' + '.github/workflows/build_docs.yml': + - 'actions/checkout@v7.0.1' + - 'actions/download-artifact@v8.0.2' + - 'actions/upload-artifact@v7.0.2' + - 'linux-system-roles/.github@main' + '.github/workflows/changelog_to_tag.yml': + - 'actions/checkout@v7.0.1' + - 'linux-system-roles/.github@main' + '.github/workflows/citest-instructions.yml': [] + '.github/workflows/citest.yml': [] + '.github/workflows/codeql.yml': + - 'actions/checkout@v7.0.1' + - 'github/codeql-action@v4.39.0' + - 'linux-system-roles/.github@main' + '.github/workflows/codespell.yml': + - 'actions/checkout@v7.0.1' + - 'codespell-project/actions-codespell@v2.4.3' + - 'linux-system-roles/.github@main' + '.github/workflows/markdownlint.yml': + - 'actions/checkout@v7.0.1' + - 'linux-system-roles/.github@main' + '.github/workflows/periodic_ci.yml': + - 'actions/checkout@v7.0.1' + - 'linux-system-roles/.github@main' + '.github/workflows/pr-title-lint.yml': + - 'actions/checkout@v7.0.1' + '.github/workflows/python-unit-test.yml': + - 'actions/checkout@v7.0.1' + - 'actions/setup-python@v7.0.0' + - 'codecov/codecov-action@v7.1.1' + - 'linux-system-roles/.github@main' + '.github/workflows/qemu-kvm-integration-tests.yml': + - 'actions/checkout@v7.0.1' + - 'actions/upload-artifact@v7.0.2' + - 'linux-system-roles/.github@main' + '.github/workflows/shellcheck.yml': + - 'actions/checkout@v7.0.1' + - 'linux-system-roles/.github@main' + '.github/workflows/test_converting_readme.yml': + - 'actions/checkout@v7.0.1' + - 'actions/upload-artifact@v7.0.2' + - 'linux-system-roles/.github@main' + '.github/workflows/tft.yml': + - 'actions/checkout@v7.0.1' + - 'linux-system-roles/.github@main' + - 'sclorg/testing-farm-as-github-action@v4.3.1' + '.github/workflows/tft_citest_bad.yml': [] + '.github/workflows/woke.yml': + - 'actions/checkout@v7.0.1' + - 'linux-system-roles/.github@main' +dependencies: + 'actions/checkout@v7.0.1': + ref: 'v7.0.1' + commit: 'sha1-3d3c42e5aac5ba805825da76410c181273ba90b1' + owner_id: 44036562 + repo_id: 197814629 + 'actions/download-artifact@v8.0.2': + ref: 'v8.0.2' + commit: 'sha1-9000827ccba6bdab643e8b6fd33ac0654aef8333' + owner_id: 44036562 + repo_id: 192626254 + 'actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd': + ref: 'v8.0.0' + commit: 'sha1-ed597411d8f924073f98dfc5c65a23a2325f34cd' + owner_id: 44036562 + repo_id: 205262760 + 'actions/setup-python@v7.0.0': + ref: 'v7.0.0' + commit: 'sha1-5fda3b95a4ea91299a34e894583c3862153e4b97' + owner_id: 44036562 + repo_id: 192625525 + 'actions/upload-artifact@v7.0.2': + ref: 'v7.0.2' + commit: 'sha1-cf430e030ddbb5b0abf93d22962f4752f3646cd9' + owner_id: 44036562 + repo_id: 192625955 + 'codecov/codecov-action@v7.1.1': + ref: 'v7.1.1' + commit: 'sha1-303a32d7a59b442fa8d48b6a1cc6825c09c847a5' + owner_id: 8226205 + repo_id: 200299178 + uses: + - 'actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd' + 'codespell-project/actions-codespell@v2.4.3': + ref: 'v2.4.3' + commit: 'sha1-e3258cca84ce02b0bb36a3d41f2c18f719a0cc1a' + owner_id: 39140587 + repo_id: 263411323 + 'github/codeql-action@v4.39.0': + ref: 'v4.39.0' + commit: 'sha1-6f2ac81f5cd81fe351a197ba0b00d91d03cd2aee' + owner_id: 9919 + repo_id: 259445878 + 'linux-system-roles/.github@main': + ref: 'main' + commit: 'sha1-816f2a5bf5cb01d001c3f6b5fab101de24bfc9d0' + owner_id: 28014670 + repo_id: 320092621 + 'sclorg/testing-farm-as-github-action@v4.3.1': + ref: 'v4.3.1' + commit: 'sha1-230555baceb860aa468d216f1822974836b965d1' + owner_id: 9047960 + repo_id: 446743009 diff --git a/.github/workflows/ansible-lint.yml b/.github/workflows/ansible-lint.yml index 48a81781..ceccc674 100644 --- a/.github/workflows/ansible-lint.yml +++ b/.github/workflows/ansible-lint.yml @@ -45,7 +45,7 @@ jobs: - name: Set commit status as pending if: github.event_name == 'issue_comment' - uses: myrotvorets/set-commit-status-action@7f84e174036426c90737dbfa32e9fd56859f93d0 # master + uses: linux-system-roles/.github/github-actions/commit-status@main with: sha: ${{ steps.head_sha_context.outputs.head_sha }} status: pending @@ -60,7 +60,7 @@ jobs: sudo apt install -y git - name: Checkout repo - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 + uses: actions/checkout@v7.0.1 with: persist-credentials: false ref: ${{ steps.head_sha_context.outputs.head_sha || github.sha }} @@ -71,7 +71,7 @@ jobs: pip3 install "git+https://github.com/linux-system-roles/tox-lsr@bfd11b23a1ed56388ea7ab8263d30e3172553a7c" - name: Set up Python - uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7 + uses: actions/setup-python@v7.0.0 with: python-version: ${{ matrix.versions.python }} @@ -88,7 +88,7 @@ jobs: - name: Set final commit status if: always() && github.event_name == 'issue_comment' && steps.head_sha_context.outputs.head_sha != '' - uses: myrotvorets/set-commit-status-action@7f84e174036426c90737dbfa32e9fd56859f93d0 # master + uses: linux-system-roles/.github/github-actions/commit-status@main with: sha: ${{ steps.head_sha_context.outputs.head_sha }} status: ${{ job.status }} diff --git a/.github/workflows/ansible-managed-var-comment.yml b/.github/workflows/ansible-managed-var-comment.yml index 541e0e02..bc2fe264 100644 --- a/.github/workflows/ansible-managed-var-comment.yml +++ b/.github/workflows/ansible-managed-var-comment.yml @@ -33,7 +33,7 @@ jobs: - name: Set commit status as pending if: github.event_name == 'issue_comment' - uses: myrotvorets/set-commit-status-action@7f84e174036426c90737dbfa32e9fd56859f93d0 # master + uses: linux-system-roles/.github/github-actions/commit-status@main with: sha: ${{ steps.head_sha_context.outputs.head_sha }} status: pending @@ -49,7 +49,7 @@ jobs: sudo apt install -y git - name: Checkout repo - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 + uses: actions/checkout@v7.0.1 with: persist-credentials: false ref: ${{ steps.head_sha_context.outputs.head_sha || github.sha }} @@ -66,7 +66,7 @@ jobs: - name: Set final commit status if: always() && github.event_name == 'issue_comment' && steps.head_sha_context.outputs.head_sha != '' - uses: myrotvorets/set-commit-status-action@7f84e174036426c90737dbfa32e9fd56859f93d0 # master + uses: linux-system-roles/.github/github-actions/commit-status@main with: sha: ${{ steps.head_sha_context.outputs.head_sha }} status: ${{ job.status }} diff --git a/.github/workflows/ansible-test.yml b/.github/workflows/ansible-test.yml index 4c1ff5c4..f6c99069 100644 --- a/.github/workflows/ansible-test.yml +++ b/.github/workflows/ansible-test.yml @@ -47,7 +47,7 @@ jobs: - name: Set commit status as pending if: github.event_name == 'issue_comment' - uses: myrotvorets/set-commit-status-action@7f84e174036426c90737dbfa32e9fd56859f93d0 # master + uses: linux-system-roles/.github/github-actions/commit-status@main with: sha: ${{ steps.head_sha_context.outputs.head_sha }} status: pending @@ -63,7 +63,7 @@ jobs: sudo apt install -y git - name: Checkout repo - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 + uses: actions/checkout@v7.0.1 with: persist-credentials: false ref: ${{ steps.head_sha_context.outputs.head_sha || github.sha }} @@ -74,7 +74,7 @@ jobs: pip3 install "git+https://github.com/linux-system-roles/tox-lsr@bfd11b23a1ed56388ea7ab8263d30e3172553a7c" - name: Set up Python - uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7 + uses: actions/setup-python@v7.0.0 with: python-version: ${{ matrix.versions.python }} @@ -89,7 +89,7 @@ jobs: - name: Set final commit status if: always() && github.event_name == 'issue_comment' && steps.head_sha_context.outputs.head_sha != '' - uses: myrotvorets/set-commit-status-action@7f84e174036426c90737dbfa32e9fd56859f93d0 # master + uses: linux-system-roles/.github/github-actions/commit-status@main with: sha: ${{ steps.head_sha_context.outputs.head_sha }} status: ${{ job.status }} diff --git a/.github/workflows/build_docs.yml b/.github/workflows/build_docs.yml index 22cb0b05..01f1e12a 100644 --- a/.github/workflows/build_docs.yml +++ b/.github/workflows/build_docs.yml @@ -19,7 +19,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Check out README and Pandoc template - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 + uses: actions/checkout@v7.0.1 with: persist-credentials: false sparse-checkout: | @@ -52,7 +52,7 @@ jobs: run: sed -i '1,8 {/^\[\!.*actions\/workflows/d}' README.md - name: Convert README.md to HTML and save to the version directory - uses: docker://pandoc/core@sha256:c7ae8ec017f748173d102c13e41d3daf91082738bdc6c65567832bf6eedf3f3a + uses: linux-system-roles/.github/github-actions/pandoc@main with: args: >- --from gfm --to html5 --toc --shift-heading-level-by=-1 @@ -60,7 +60,7 @@ jobs: --output ${{ env.RELEASE_VERSION }}/README.html README.md - name: Upload docs HTML artifact - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 + uses: actions/upload-artifact@v7.0.2 with: name: docs-html path: ${{ env.RELEASE_VERSION }}/README.html @@ -69,6 +69,7 @@ jobs: needs: build_docs runs-on: ubuntu-latest permissions: + actions: read contents: write steps: - name: Update pip, git @@ -78,7 +79,7 @@ jobs: sudo apt install -y git - name: Check out code - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 + uses: actions/checkout@v7.0.1 with: persist-credentials: true # needed for docs branch initialization push fetch-depth: 0 @@ -102,7 +103,7 @@ jobs: fi - name: Checkout the docs branch - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 + uses: actions/checkout@v7.0.1 with: ref: docs persist-credentials: true # needed for commit and push @@ -126,7 +127,7 @@ jobs: fi - name: Download docs HTML artifact - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1 + uses: actions/download-artifact@v8.0.2 with: name: docs-html path: ${{ env.RELEASE_VERSION }} @@ -145,7 +146,7 @@ jobs: git commit -m "Update README.html for ${{ env.RELEASE_VERSION }}" - name: Push changes - uses: ad-m/github-push-action@881a6320fdb16eb5318c5054f31c218aec2b324c # master + uses: linux-system-roles/.github/github-actions/git-push@main with: github_token: ${{ secrets.GITHUB_TOKEN }} branch: docs diff --git a/.github/workflows/changelog_to_tag.yml b/.github/workflows/changelog_to_tag.yml index 34f271a0..a964ebe8 100644 --- a/.github/workflows/changelog_to_tag.yml +++ b/.github/workflows/changelog_to_tag.yml @@ -22,7 +22,7 @@ jobs: sudo apt install -y git - name: checkout PR - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 + uses: actions/checkout@v7.0.1 with: persist-credentials: false @@ -71,7 +71,7 @@ jobs: echo "tagname=$_tagname" >> "$GITHUB_OUTPUT" echo "branch=$_branch" >> "$GITHUB_OUTPUT" - name: Create tag - uses: mathieudutour/github-tag-action@af99e60ce8132224b8e6ebab5023449fe256ed46 # v7 + uses: linux-system-roles/.github/github-actions/tag@main with: github_token: ${{ secrets.GITHUB_TOKEN }} custom_tag: ${{ steps.tag.outputs.tagname }} @@ -79,7 +79,7 @@ jobs: - name: Create Release id: create_release - uses: ncipollo/release-action@339a81892b84b4eeb0f6e744e4574d79d0d9b8dd # v1.21.0 + uses: linux-system-roles/.github/github-actions/release@main with: tag: ${{ steps.tag.outputs.tagname }} name: Version ${{ steps.tag.outputs.tagname }} @@ -87,7 +87,7 @@ jobs: makeLatest: true - name: Publish role to Galaxy - uses: robertdebock/galaxy-action@7d89099e09f4385ec4b53eb58c0d120f1ad806dd # 1.2.1 + uses: linux-system-roles/.github/github-actions/galaxy-import@main with: galaxy_api_key: ${{ secrets.galaxy_api_key }} git_branch: ${{ steps.tag.outputs.branch }} diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index a9a48dbe..15ba8310 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -46,7 +46,7 @@ jobs: - name: Set commit status as pending if: github.event_name == 'issue_comment' - uses: myrotvorets/set-commit-status-action@7f84e174036426c90737dbfa32e9fd56859f93d0 # master + uses: linux-system-roles/.github/github-actions/commit-status@main with: sha: ${{ steps.head_sha_context.outputs.head_sha }} status: pending @@ -61,28 +61,28 @@ jobs: sudo apt install -y git - name: Checkout - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 + uses: actions/checkout@v7.0.1 with: persist-credentials: false ref: ${{ steps.head_sha_context.outputs.head_sha || github.sha }} - name: Initialize CodeQL - uses: github/codeql-action/init@2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2 # v4.38.2 + uses: github/codeql-action/init@v4.39.0 with: languages: ${{ matrix.language }} queries: +security-and-quality - name: Autobuild - uses: github/codeql-action/autobuild@2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2 # v4.38.2 + uses: github/codeql-action/autobuild@v4.39.0 - name: Perform CodeQL Analysis - uses: github/codeql-action/analyze@2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2 # v4.38.2 + uses: github/codeql-action/analyze@v4.39.0 with: category: "/language:${{ matrix.language }}" - name: Set final commit status if: always() && github.event_name == 'issue_comment' && steps.head_sha_context.outputs.head_sha != '' - uses: myrotvorets/set-commit-status-action@7f84e174036426c90737dbfa32e9fd56859f93d0 # master + uses: linux-system-roles/.github/github-actions/commit-status@main with: sha: ${{ steps.head_sha_context.outputs.head_sha }} status: ${{ job.status }} diff --git a/.github/workflows/codespell.yml b/.github/workflows/codespell.yml index ca6953a7..d37c5da6 100644 --- a/.github/workflows/codespell.yml +++ b/.github/workflows/codespell.yml @@ -35,7 +35,7 @@ jobs: - name: Set commit status as pending if: github.event_name == 'issue_comment' - uses: myrotvorets/set-commit-status-action@7f84e174036426c90737dbfa32e9fd56859f93d0 # master + uses: linux-system-roles/.github/github-actions/commit-status@main with: sha: ${{ steps.head_sha_context.outputs.head_sha }} status: pending @@ -44,17 +44,17 @@ jobs: targetUrl: ${{ github.server_url }}/${{ github.repository }}/actions/runs/${{ github.run_id }}/job/${{ job.check_run_id }} - name: Checkout - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 + uses: actions/checkout@v7.0.1 with: persist-credentials: false ref: ${{ steps.head_sha_context.outputs.head_sha || github.sha }} - name: Codespell - uses: codespell-project/actions-codespell@e3258cca84ce02b0bb36a3d41f2c18f719a0cc1a # v2.4.3 + uses: codespell-project/actions-codespell@v2.4.3 - name: Set final commit status if: always() && github.event_name == 'issue_comment' && steps.head_sha_context.outputs.head_sha != '' - uses: myrotvorets/set-commit-status-action@7f84e174036426c90737dbfa32e9fd56859f93d0 # master + uses: linux-system-roles/.github/github-actions/commit-status@main with: sha: ${{ steps.head_sha_context.outputs.head_sha }} status: ${{ job.status }} diff --git a/.github/workflows/markdownlint.yml b/.github/workflows/markdownlint.yml index c65e3f96..766f158e 100644 --- a/.github/workflows/markdownlint.yml +++ b/.github/workflows/markdownlint.yml @@ -34,7 +34,7 @@ jobs: - name: Set commit status as pending if: github.event_name == 'issue_comment' - uses: myrotvorets/set-commit-status-action@7f84e174036426c90737dbfa32e9fd56859f93d0 # master + uses: linux-system-roles/.github/github-actions/commit-status@main with: sha: ${{ steps.head_sha_context.outputs.head_sha }} status: pending @@ -49,7 +49,7 @@ jobs: sudo apt install -y git - name: Check out code - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 + uses: actions/checkout@v7.0.1 with: persist-credentials: false ref: ${{ steps.head_sha_context.outputs.head_sha || github.sha }} @@ -57,7 +57,7 @@ jobs: # CHANGELOG.md is generated automatically from PR titles and descriptions # It might have issues but they are not critical - name: Lint all markdown files except for CHANGELOG.md - uses: docker://avtodev/markdown-lint:master + uses: linux-system-roles/.github/github-actions/markdownlint@main with: args: >- --ignore=CHANGELOG.md @@ -66,7 +66,7 @@ jobs: - name: Set final commit status if: always() && github.event_name == 'issue_comment' && steps.head_sha_context.outputs.head_sha != '' - uses: myrotvorets/set-commit-status-action@7f84e174036426c90737dbfa32e9fd56859f93d0 # master + uses: linux-system-roles/.github/github-actions/commit-status@main with: sha: ${{ steps.head_sha_context.outputs.head_sha }} status: ${{ job.status }} diff --git a/.github/workflows/periodic_ci.yml b/.github/workflows/periodic_ci.yml index 12dce2e1..7d8b3c84 100644 --- a/.github/workflows/periodic_ci.yml +++ b/.github/workflows/periodic_ci.yml @@ -32,7 +32,7 @@ jobs: sudo apt install -y git - name: Checkout latest code - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 + uses: actions/checkout@v7.0.1 with: persist-credentials: true # needed for commit and push fetch-depth: 0 @@ -53,35 +53,11 @@ jobs: git push -f --set-upstream origin ${{ env.BRANCH_NAME }} - name: Create and comment pull request - uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9 + uses: linux-system-roles/.github/github-actions/periodic-ci-pr@main with: github-token: ${{ secrets.GH_PUSH_TOKEN }} - script: | - const head = [context.repo.owner, ":", "${{ env.BRANCH_NAME }}"].join(""); - const response = await github.rest.pulls.list({ - owner: context.repo.owner, - repo: context.repo.repo, - head: head, - base: context.ref, - state: "open" - }); - let pr_number = ''; - if (response.data.length === 0) { - pr_number = (await github.rest.pulls.create({ - owner: context.repo.owner, - repo: context.repo.repo, - title: "${{ env.COMMIT_MESSAGE }}", - body: "${{ env.BODY_MESSAGE }}", - head: "${{ env.BRANCH_NAME }}", - base: context.ref, - draft: true - })).data.number; - } else { - pr_number = response.data[0].number; - } - github.rest.issues.createComment({ - owner: context.repo.owner, - repo: context.repo.repo, - issue_number: pr_number, - body: "${{ env.COMMENT }}", - }); + branch: ${{ env.BRANCH_NAME }} + base: ${{ github.ref_name }} + title: ${{ env.COMMIT_MESSAGE }} + body: ${{ env.BODY_MESSAGE }} + comment: ${{ env.COMMENT }} diff --git a/.github/workflows/pr-title-lint.yml b/.github/workflows/pr-title-lint.yml index 2bea3657..488c24f9 100644 --- a/.github/workflows/pr-title-lint.yml +++ b/.github/workflows/pr-title-lint.yml @@ -19,7 +19,7 @@ jobs: if: inputs.requested || github.event_name != 'issue_comment' runs-on: ubuntu-latest steps: - - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 + - uses: actions/checkout@v7.0.1 with: persist-credentials: false fetch-depth: 0 diff --git a/.github/workflows/python-unit-test.yml b/.github/workflows/python-unit-test.yml index 8d99a633..416e7b62 100644 --- a/.github/workflows/python-unit-test.yml +++ b/.github/workflows/python-unit-test.yml @@ -49,7 +49,7 @@ jobs: - name: Set commit status as pending if: github.event_name == 'issue_comment' - uses: myrotvorets/set-commit-status-action@7f84e174036426c90737dbfa32e9fd56859f93d0 # master + uses: linux-system-roles/.github/github-actions/commit-status@main with: sha: ${{ steps.head_sha_context.outputs.head_sha }} status: pending @@ -64,7 +64,7 @@ jobs: sudo apt install -y git - name: checkout PR - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 + uses: actions/checkout@v7.0.1 with: persist-credentials: false ref: ${{ steps.head_sha_context.outputs.head_sha || github.sha }} @@ -77,7 +77,7 @@ jobs: - name: Set up Python 3 if: ${{ matrix.pyver_os.ver != '2.7' }} - uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7 + uses: actions/setup-python@v7.0.0 with: python-version: ${{ matrix.pyver_os.ver }} @@ -116,11 +116,11 @@ jobs: TOXENV="$toxenvs" lsr_ci_runtox - name: Upload coverage reports to Codecov - uses: codecov/codecov-action@303a32d7a59b442fa8d48b6a1cc6825c09c847a5 # v7.1.1 + uses: codecov/codecov-action@v7.1.1 - name: Set final commit status if: always() && github.event_name == 'issue_comment' && steps.head_sha_context.outputs.head_sha != '' - uses: myrotvorets/set-commit-status-action@7f84e174036426c90737dbfa32e9fd56859f93d0 # master + uses: linux-system-roles/.github/github-actions/commit-status@main with: sha: ${{ steps.head_sha_context.outputs.head_sha }} status: ${{ job.status }} diff --git a/.github/workflows/qemu-kvm-integration-tests.yml b/.github/workflows/qemu-kvm-integration-tests.yml index 2f5248a2..4dfb898e 100644 --- a/.github/workflows/qemu-kvm-integration-tests.yml +++ b/.github/workflows/qemu-kvm-integration-tests.yml @@ -63,7 +63,7 @@ jobs: - name: Set commit status as pending if: github.event_name == 'issue_comment' - uses: myrotvorets/set-commit-status-action@7f84e174036426c90737dbfa32e9fd56859f93d0 # master + uses: linux-system-roles/.github/github-actions/commit-status@main with: sha: ${{ steps.head_sha_context.outputs.head_sha }} status: pending @@ -72,7 +72,7 @@ jobs: targetUrl: ${{ github.server_url }}/${{ github.repository }}/actions/runs/${{ github.run_id }}/job/${{ job.check_run_id }} - name: Checkout repo - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 + uses: actions/checkout@v7.0.1 with: persist-credentials: false ref: ${{ steps.head_sha_context.outputs.head_sha || github.sha }} @@ -151,7 +151,7 @@ jobs: - name: Ensure use of podman 5 if: steps.check_platform.outputs.supported && steps.check_podman_version.outputs.need_podman_update == 1 - uses: redhat-actions/podman-install@5b0fb16319979de14e2c7c2c1cc27c98f107ae52 # main + uses: linux-system-roles/.github/github-actions/podman-install@main - name: Configure tox-lsr if: steps.check_platform.outputs.supported @@ -235,7 +235,7 @@ jobs: - name: Upload test logs on failure if: failure() - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 + uses: actions/upload-artifact@v7.0.2 with: name: "logs-${{ matrix.scenario.image }}-${{ matrix.scenario.env }}" path: | @@ -261,7 +261,7 @@ jobs: - name: Set final commit status if: always() && github.event_name == 'issue_comment' && steps.head_sha_context.outputs.head_sha != '' && (steps.check_platform.outputs.supported || failure()) - uses: myrotvorets/set-commit-status-action@7f84e174036426c90737dbfa32e9fd56859f93d0 # master + uses: linux-system-roles/.github/github-actions/commit-status@main with: sha: ${{ steps.head_sha_context.outputs.head_sha }} status: ${{ job.status }} @@ -271,7 +271,7 @@ jobs: - name: Set commit status as success with a description that platform is skipped if: ${{ success() && github.event_name == 'issue_comment' && steps.check_platform.outputs.supported == '' }} - uses: myrotvorets/set-commit-status-action@7f84e174036426c90737dbfa32e9fd56859f93d0 # master + uses: linux-system-roles/.github/github-actions/commit-status@main with: sha: ${{ steps.head_sha_context.outputs.head_sha }} status: success diff --git a/.github/workflows/shellcheck.yml b/.github/workflows/shellcheck.yml index 5139f890..3e9413db 100644 --- a/.github/workflows/shellcheck.yml +++ b/.github/workflows/shellcheck.yml @@ -36,7 +36,7 @@ jobs: - name: Set commit status as pending if: github.event_name == 'issue_comment' - uses: myrotvorets/set-commit-status-action@7f84e174036426c90737dbfa32e9fd56859f93d0 # master + uses: linux-system-roles/.github/github-actions/commit-status@main with: sha: ${{ steps.head_sha_context.outputs.head_sha }} status: pending @@ -51,14 +51,14 @@ jobs: sudo apt install -y git - name: Checkout repo - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 + uses: actions/checkout@v7.0.1 with: persist-credentials: false ref: ${{ steps.head_sha_context.outputs.head_sha || github.sha }} - name: Run ShellCheck id: shellcheck_id - uses: ludeeus/action-shellcheck@00b27aa7cb85167568cb48a3838b75f4265f2bca # master + uses: linux-system-roles/.github/github-actions/shellcheck@main - name: Show file paths scanned run: | @@ -67,7 +67,7 @@ jobs: - name: Set final commit status if: always() && github.event_name == 'issue_comment' && steps.head_sha_context.outputs.head_sha != '' - uses: myrotvorets/set-commit-status-action@7f84e174036426c90737dbfa32e9fd56859f93d0 # master + uses: linux-system-roles/.github/github-actions/commit-status@main with: sha: ${{ steps.head_sha_context.outputs.head_sha }} status: ${{ job.status }} diff --git a/.github/workflows/test_converting_readme.yml b/.github/workflows/test_converting_readme.yml index b8911379..2520aa65 100644 --- a/.github/workflows/test_converting_readme.yml +++ b/.github/workflows/test_converting_readme.yml @@ -38,7 +38,7 @@ jobs: - name: Set commit status as pending if: github.event_name == 'issue_comment' - uses: myrotvorets/set-commit-status-action@7f84e174036426c90737dbfa32e9fd56859f93d0 # master + uses: linux-system-roles/.github/github-actions/commit-status@main with: sha: ${{ steps.head_sha_context.outputs.head_sha }} status: pending @@ -53,7 +53,7 @@ jobs: sudo apt install -y git - name: Check out code - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 + uses: actions/checkout@v7.0.1 with: persist-credentials: false ref: ${{ steps.head_sha_context.outputs.head_sha || github.sha }} @@ -62,22 +62,23 @@ jobs: run: sed -i '1,8 {/^\[\!.*actions\/workflows/d}' README.md - name: Convert README.md to HTML - uses: docker://pandoc/core:latest + uses: linux-system-roles/.github/github-actions/pandoc@main with: + image: pandoc/core@sha256:62518bfb6833705dc90a1634d8d879299bd820b3f74ad3b32fba8b618452553a args: >- --from gfm --to html5 --toc --shift-heading-level-by=-1 --template .pandoc_template.html5 --output README.html README.md - name: Upload README.html as an artifact - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 + uses: actions/upload-artifact@v7.0.2 with: name: README.html path: README.html - name: Set final commit status if: always() && github.event_name == 'issue_comment' && steps.head_sha_context.outputs.head_sha != '' - uses: myrotvorets/set-commit-status-action@7f84e174036426c90737dbfa32e9fd56859f93d0 # master + uses: linux-system-roles/.github/github-actions/commit-status@main with: sha: ${{ steps.head_sha_context.outputs.head_sha }} status: ${{ job.status }} diff --git a/.github/workflows/tft.yml b/.github/workflows/tft.yml index 4f35be70..7f7477c9 100644 --- a/.github/workflows/tft.yml +++ b/.github/workflows/tft.yml @@ -56,7 +56,7 @@ jobs: GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} - name: Checkout PR - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 + uses: actions/checkout@v7.0.1 with: persist-credentials: false ref: ${{ steps.head_sha.outputs.head_sha || github.sha }} @@ -143,7 +143,7 @@ jobs: - name: Set commit status as pending if: contains(needs.prepare_vars.outputs.supported_platforms, matrix.platform) - uses: myrotvorets/set-commit-status-action@7f84e174036426c90737dbfa32e9fd56859f93d0 # master + uses: linux-system-roles/.github/github-actions/commit-status@main with: sha: ${{ steps.head_sha_context.outputs.head_sha }} status: pending @@ -166,7 +166,7 @@ jobs: - name: Set commit status as success with a description that platform is skipped if: "!contains(needs.prepare_vars.outputs.supported_platforms, matrix.platform)" - uses: myrotvorets/set-commit-status-action@7f84e174036426c90737dbfa32e9fd56859f93d0 # master + uses: linux-system-roles/.github/github-actions/commit-status@main with: sha: ${{ steps.head_sha_context.outputs.head_sha }} status: success @@ -175,7 +175,7 @@ jobs: targetUrl: ${{ github.server_url }}/${{ github.repository }}/actions/runs/${{ github.run_id }}/job/${{ job.check_run_id }} - name: Run test in testing farm - uses: sclorg/testing-farm-as-github-action@230555baceb860aa468d216f1822974836b965d1 # v4.3.1 + uses: sclorg/testing-farm-as-github-action@v4.3.1 if: contains(needs.prepare_vars.outputs.supported_platforms, matrix.platform) with: git_ref: main @@ -204,7 +204,7 @@ jobs: tmt_plan_filter: "tag:playbooks_parallel,kernel_settings" - name: Set final commit status - uses: myrotvorets/set-commit-status-action@7f84e174036426c90737dbfa32e9fd56859f93d0 # master + uses: linux-system-roles/.github/github-actions/commit-status@main if: always() && contains(needs.prepare_vars.outputs.supported_platforms, matrix.platform) with: sha: ${{ steps.head_sha_context.outputs.head_sha }} diff --git a/.github/workflows/woke.yml b/.github/workflows/woke.yml index a65b0ce3..445389fe 100644 --- a/.github/workflows/woke.yml +++ b/.github/workflows/woke.yml @@ -35,7 +35,7 @@ jobs: - name: Set commit status as pending if: github.event_name == 'issue_comment' - uses: myrotvorets/set-commit-status-action@7f84e174036426c90737dbfa32e9fd56859f93d0 # master + uses: linux-system-roles/.github/github-actions/commit-status@main with: sha: ${{ steps.head_sha_context.outputs.head_sha }} status: pending @@ -44,14 +44,14 @@ jobs: targetUrl: ${{ github.server_url }}/${{ github.repository }}/actions/runs/${{ github.run_id }}/job/${{ job.check_run_id }} - name: Checkout - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 + uses: actions/checkout@v7.0.1 with: persist-credentials: false ref: ${{ steps.head_sha_context.outputs.head_sha || github.sha }} - name: Run lsr-woke-action # Originally, uses: get-woke/woke-action@v0 - uses: linux-system-roles/lsr-woke-action@33e72e28c826f05aaee08d0b70c7d2cd9e0a39a7 # main + uses: linux-system-roles/.github/github-actions/woke@main with: woke-args: "-c https://raw.githubusercontent.com/linux-system-roles/tox-lsr/main/src/tox_lsr/config_files/woke.yml --count-only-error-for-failure" # Cause the check to fail on any broke rules @@ -59,7 +59,7 @@ jobs: - name: Set final commit status if: always() && github.event_name == 'issue_comment' && steps.head_sha_context.outputs.head_sha != '' - uses: myrotvorets/set-commit-status-action@7f84e174036426c90737dbfa32e9fd56859f93d0 # master + uses: linux-system-roles/.github/github-actions/commit-status@main with: sha: ${{ steps.head_sha_context.outputs.head_sha }} status: ${{ job.status }} diff --git a/meta/collection-requirements.yml b/meta/collection-requirements.yml index 78f93d31..c012a862 100644 --- a/meta/collection-requirements.yml +++ b/meta/collection-requirements.yml @@ -2,3 +2,4 @@ --- collections: - name: ansible.posix + - name: community.general