From 576f0d8d0285bdf8fe2d5e767c1b7d65ee18d8fb Mon Sep 17 00:00:00 2001 From: Rich Megginson Date: Tue, 20 Oct 2026 11:53:38 -0600 Subject: [PATCH] ci: use shared actions and lock workflow dependencies Small third-party actions create recurring dependency updates across role repositories. Replace them with composite actions in linux-system-roles/.github. Implement commit status, release, pull request, and other workflow operations with git, gh, Bash, and Python. Use pinned official GitHub actions for checkout and artifact transfer, and retain the upstream actions needed for CodeQL, Codecov, codespell, setup-python, and Testing Farm. Update the role workflow templates to use the shared actions. Document the publishing order so the actions are available before the templates are rolled out to role repositories. Generate an actions.lock file for each managed role repository. Limit organization workflows to GitHub-owned and selected external actions, and require SHA pinning. Locked commits satisfy the pinning rule for workflows covered by an actions.lock file. Assisted-by: Codex using model Sol medium 6 Signed-off-by: Rich Megginson --- .github/workflows/actions.lock | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/actions.lock b/.github/workflows/actions.lock index 6841e22..ba9c556 100644 --- a/.github/workflows/actions.lock +++ b/.github/workflows/actions.lock @@ -109,7 +109,7 @@ dependencies: repo_id: 259445878 'linux-system-roles/.github@main': ref: 'main' - commit: 'sha1-816f2a5bf5cb01d001c3f6b5fab101de24bfc9d0' + commit: 'sha1-391ce4abac68b563afd81c3c0fb889df826cc6e6' owner_id: 28014670 repo_id: 320092621 'sclorg/testing-farm-as-github-action@v4.3.1':