From b7b66d916572924839bb0bf7b0388b401d382fd8 Mon Sep 17 00:00:00 2001 From: Techassi Date: Tue, 22 Sep 2026 11:45:31 +0200 Subject: [PATCH] ci: Use self-repository syntax in workflows --- .github/actionlint.yaml | 8 ++++++++ .github/workflows/dev_dbt.yaml | 2 +- .../workflows/dev_jupyter-pyspark-with-alibi-detect.yaml | 2 +- .github/workflows/dev_jupyterhub-keycloak-spark.yaml | 2 +- .github/workflows/dev_nifi.yaml | 2 +- .pre-commit-config.yaml | 8 +++++++- 6 files changed, 19 insertions(+), 5 deletions(-) create mode 100644 .github/actionlint.yaml diff --git a/.github/actionlint.yaml b/.github/actionlint.yaml new file mode 100644 index 00000000..0ed45f3f --- /dev/null +++ b/.github/actionlint.yaml @@ -0,0 +1,8 @@ +--- +# actionlint doesn't yet recognize GitHub's "$/" self-repository syntax. +# See https://github.com/rhysd/actionlint/issues/711 +paths: + .github/workflows/**/*.{yaml,yml}: + ignore: + - reusable workflow call "\$/.+" at "uses" is not following the format + - specifying action "\$/.+" in invalid format because ref is missing diff --git a/.github/workflows/dev_dbt.yaml b/.github/workflows/dev_dbt.yaml index fca4a7ae..42616c82 100644 --- a/.github/workflows/dev_dbt.yaml +++ b/.github/workflows/dev_dbt.yaml @@ -18,7 +18,7 @@ on: jobs: build_image: name: Reusable Workflow - uses: ./.github/workflows/reusable_build_image.yaml + uses: $/.github/workflows/reusable_build_image.yaml permissions: contents: read id-token: write # Needed for cosign keyless signing in the reusable workflow diff --git a/.github/workflows/dev_jupyter-pyspark-with-alibi-detect.yaml b/.github/workflows/dev_jupyter-pyspark-with-alibi-detect.yaml index b29f4335..0e332bbf 100644 --- a/.github/workflows/dev_jupyter-pyspark-with-alibi-detect.yaml +++ b/.github/workflows/dev_jupyter-pyspark-with-alibi-detect.yaml @@ -18,7 +18,7 @@ on: jobs: build_image: name: Reusable Workflow - uses: ./.github/workflows/reusable_build_image.yaml + uses: $/.github/workflows/reusable_build_image.yaml permissions: contents: read id-token: write # Needed for cosign keyless signing in the reusable workflow diff --git a/.github/workflows/dev_jupyterhub-keycloak-spark.yaml b/.github/workflows/dev_jupyterhub-keycloak-spark.yaml index 74ea2d2e..6a135884 100644 --- a/.github/workflows/dev_jupyterhub-keycloak-spark.yaml +++ b/.github/workflows/dev_jupyterhub-keycloak-spark.yaml @@ -19,7 +19,7 @@ on: jobs: build_image: name: Reusable Workflow - uses: ./.github/workflows/reusable_build_image.yaml + uses: $/.github/workflows/reusable_build_image.yaml permissions: contents: read id-token: write # Needed for cosign keyless signing in the reusable workflow diff --git a/.github/workflows/dev_nifi.yaml b/.github/workflows/dev_nifi.yaml index 0d8c5447..ccd1d41d 100644 --- a/.github/workflows/dev_nifi.yaml +++ b/.github/workflows/dev_nifi.yaml @@ -19,7 +19,7 @@ on: jobs: build_image: name: Reusable Workflow - uses: ./.github/workflows/reusable_build_image.yaml + uses: $/.github/workflows/reusable_build_image.yaml permissions: contents: read id-token: write # Needed for cosign keyless signing in the reusable workflow diff --git a/.pre-commit-config.yaml b/.pre-commit-config.yaml index fabafc4a..55221b34 100644 --- a/.pre-commit-config.yaml +++ b/.pre-commit-config.yaml @@ -32,6 +32,12 @@ repos: args: ["--severity=info"] - repo: https://github.com/rhysd/actionlint - rev: v1.7.9 # 1.7.1 + rev: e7d448ef7507c20fc4c88a95d0c448b848cd6127 # 1.7.8 hooks: - id: actionlint + + - repo: https://github.com/zizmorcore/zizmor-pre-commit + rev: fa412071e4f5d44d44f9e365f4676f9df92456a2 # v1.30.1 + hooks: + - id: zizmor + args: ["--no-progress", "--min-confidence", "medium"]