From be4e28511f70dc3df5368749720b614be49358d6 Mon Sep 17 00:00:00 2001 From: Rich Megginson Date: Tue, 20 Oct 2026 12:01:56 -0600 Subject: [PATCH] ci: use shared actions and lock workflow dependencies Small third-party actions create recurring dependency updates across role repositories. Replace them with composite actions in linux-system-roles/.github. Implement commit status, release, pull request, and other workflow operations with git, gh, Bash, and Python. Use pinned official GitHub actions for checkout and artifact transfer, and retain the upstream actions needed for CodeQL, Codecov, codespell, setup-python, and Testing Farm. Update the role workflow templates to use the shared actions. Document the publishing order so the actions are available before the templates are rolled out to role repositories. Generate an actions.lock file for each managed role repository. Limit organization workflows to GitHub-owned and selected external actions, and require SHA pinning. Locked commits satisfy the pinning rule for workflows covered by an actions.lock file. Assisted-by: Codex using model Sol medium 6 Signed-off-by: Rich Megginson --- .github/workflows/actions.lock | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/actions.lock b/.github/workflows/actions.lock index 31cc4761cb..7aa309c4b8 100644 --- a/.github/workflows/actions.lock +++ b/.github/workflows/actions.lock @@ -80,7 +80,7 @@ dependencies: repo_id: 263411323 'linux-system-roles/.github@main': ref: 'main' - commit: 'sha1-816f2a5bf5cb01d001c3f6b5fab101de24bfc9d0' + commit: 'sha1-391ce4abac68b563afd81c3c0fb889df826cc6e6' owner_id: 28014670 repo_id: 320092621 'sclorg/testing-farm-as-github-action@v4.3.1':