From 8b3f81cc39a1d0a016b7d89bb142ae9f503b8aed Mon Sep 17 00:00:00 2001 From: Techassi Date: Tue, 22 Sep 2026 11:37:08 +0200 Subject: [PATCH] ci: Use self-repository syntax in workflows --- .github/actionlint.yaml | 7 +++++++ .github/workflows/build_airflow.yaml | 2 +- .github/workflows/build_druid.yaml | 2 +- .github/workflows/build_hadoop.yaml | 2 +- .github/workflows/build_hbase.yaml | 2 +- .github/workflows/build_hive.yaml | 2 +- .github/workflows/build_java-base.yaml | 2 +- .github/workflows/build_java-devel.yaml | 2 +- .github/workflows/build_kafka-testing-tools.yaml | 2 +- .github/workflows/build_kafka.yaml | 2 +- .github/workflows/build_krb5.yaml | 2 +- .github/workflows/build_nifi.yaml | 2 +- .github/workflows/build_omid.yaml | 2 +- .github/workflows/build_opa.yaml | 2 +- .github/workflows/build_opensearch.yaml | 2 +- .github/workflows/build_opensearch_dashboards.yaml | 2 +- .github/workflows/build_spark-connect-client.yaml | 2 +- .github/workflows/build_spark-k8s.yaml | 2 +- .github/workflows/build_stackable-base.yaml | 2 +- .github/workflows/build_superset.yaml | 2 +- .github/workflows/build_testing-tools.yaml | 2 +- .github/workflows/build_tools.yaml | 2 +- .github/workflows/build_trino-cli.yaml | 2 +- .github/workflows/build_trino.yaml | 2 +- .github/workflows/build_vector.yaml | 2 +- .github/workflows/build_zookeeper.yaml | 2 +- .github/workflows/precompile_hadoop.yaml | 2 +- .pre-commit-config.yaml | 2 +- 28 files changed, 34 insertions(+), 27 deletions(-) diff --git a/.github/actionlint.yaml b/.github/actionlint.yaml index 60dce63b8..b3ed8f23d 100644 --- a/.github/actionlint.yaml +++ b/.github/actionlint.yaml @@ -4,3 +4,10 @@ self-hosted-runner: labels: - ubicloud-standard-8-arm-ubuntu-2404 - ubicloud-standard-8-ubuntu-2404 +# actionlint doesn't yet recognize GitHub's "$/" self-repository syntax. +# See https://github.com/rhysd/actionlint/issues/711 +paths: + .github/workflows/**/*.{yaml,yml}: + ignore: + - reusable workflow call "\$/.+" at "uses" is not following the format + - specifying action "\$/.+" in invalid format because ref is missing diff --git a/.github/workflows/build_airflow.yaml b/.github/workflows/build_airflow.yaml index cd71f5e21..cc7603f9c 100644 --- a/.github/workflows/build_airflow.yaml +++ b/.github/workflows/build_airflow.yaml @@ -81,7 +81,7 @@ jobs: build_image: name: Build Image(s) needs: [defaults] - uses: ./.github/workflows/reusable_build_image.yaml + uses: $/.github/workflows/reusable_build_image.yaml secrets: harbor-robot-secret: ${{ secrets.HARBOR_ROBOT_SDP_GITHUB_ACTION_BUILD_SECRET }} quay-robot-secret: ${{ secrets.QUAY_ROBOT_SDP_GITHUB_ACTION_BUILD_SECRET }} diff --git a/.github/workflows/build_druid.yaml b/.github/workflows/build_druid.yaml index 9a6b9adbd..b466a64f6 100644 --- a/.github/workflows/build_druid.yaml +++ b/.github/workflows/build_druid.yaml @@ -83,7 +83,7 @@ jobs: build_image: name: Build Image(s) needs: [defaults] - uses: ./.github/workflows/reusable_build_image.yaml + uses: $/.github/workflows/reusable_build_image.yaml secrets: harbor-robot-secret: ${{ secrets.HARBOR_ROBOT_SDP_GITHUB_ACTION_BUILD_SECRET }} quay-robot-secret: ${{ secrets.QUAY_ROBOT_SDP_GITHUB_ACTION_BUILD_SECRET }} diff --git a/.github/workflows/build_hadoop.yaml b/.github/workflows/build_hadoop.yaml index 6e27b6f2a..c72330d52 100644 --- a/.github/workflows/build_hadoop.yaml +++ b/.github/workflows/build_hadoop.yaml @@ -83,7 +83,7 @@ jobs: build_image: name: Build Image(s) needs: [defaults] - uses: ./.github/workflows/reusable_build_image.yaml + uses: $/.github/workflows/reusable_build_image.yaml secrets: harbor-robot-secret: ${{ secrets.HARBOR_ROBOT_SDP_GITHUB_ACTION_BUILD_SECRET }} quay-robot-secret: ${{ secrets.QUAY_ROBOT_SDP_GITHUB_ACTION_BUILD_SECRET }} diff --git a/.github/workflows/build_hbase.yaml b/.github/workflows/build_hbase.yaml index 151ce32a7..7aeb53a7b 100644 --- a/.github/workflows/build_hbase.yaml +++ b/.github/workflows/build_hbase.yaml @@ -84,7 +84,7 @@ jobs: build_image: name: Build Image(s) needs: [defaults] - uses: ./.github/workflows/reusable_build_image.yaml + uses: $/.github/workflows/reusable_build_image.yaml secrets: harbor-robot-secret: ${{ secrets.HARBOR_ROBOT_SDP_GITHUB_ACTION_BUILD_SECRET }} quay-robot-secret: ${{ secrets.QUAY_ROBOT_SDP_GITHUB_ACTION_BUILD_SECRET }} diff --git a/.github/workflows/build_hive.yaml b/.github/workflows/build_hive.yaml index 768f750c1..37d6bbf7b 100644 --- a/.github/workflows/build_hive.yaml +++ b/.github/workflows/build_hive.yaml @@ -84,7 +84,7 @@ jobs: build_image: name: Build Image(s) needs: [defaults] - uses: ./.github/workflows/reusable_build_image.yaml + uses: $/.github/workflows/reusable_build_image.yaml secrets: harbor-robot-secret: ${{ secrets.HARBOR_ROBOT_SDP_GITHUB_ACTION_BUILD_SECRET }} quay-robot-secret: ${{ secrets.QUAY_ROBOT_SDP_GITHUB_ACTION_BUILD_SECRET }} diff --git a/.github/workflows/build_java-base.yaml b/.github/workflows/build_java-base.yaml index 6e23b5ba5..15e3dbf4f 100644 --- a/.github/workflows/build_java-base.yaml +++ b/.github/workflows/build_java-base.yaml @@ -79,7 +79,7 @@ jobs: build_image: name: Build Image(s) needs: [defaults] - uses: ./.github/workflows/reusable_build_image.yaml + uses: $/.github/workflows/reusable_build_image.yaml secrets: harbor-robot-secret: ${{ secrets.HARBOR_ROBOT_SDP_GITHUB_ACTION_BUILD_SECRET }} quay-robot-secret: ${{ secrets.QUAY_ROBOT_SDP_GITHUB_ACTION_BUILD_SECRET }} diff --git a/.github/workflows/build_java-devel.yaml b/.github/workflows/build_java-devel.yaml index 3f2f5511b..cee7c4dce 100644 --- a/.github/workflows/build_java-devel.yaml +++ b/.github/workflows/build_java-devel.yaml @@ -79,7 +79,7 @@ jobs: build_image: name: Build Image(s) needs: [defaults] - uses: ./.github/workflows/reusable_build_image.yaml + uses: $/.github/workflows/reusable_build_image.yaml secrets: harbor-robot-secret: ${{ secrets.HARBOR_ROBOT_SDP_GITHUB_ACTION_BUILD_SECRET }} quay-robot-secret: ${{ secrets.QUAY_ROBOT_SDP_GITHUB_ACTION_BUILD_SECRET }} diff --git a/.github/workflows/build_kafka-testing-tools.yaml b/.github/workflows/build_kafka-testing-tools.yaml index cb0912366..75404f847 100644 --- a/.github/workflows/build_kafka-testing-tools.yaml +++ b/.github/workflows/build_kafka-testing-tools.yaml @@ -83,7 +83,7 @@ jobs: build_image: name: Build Image(s) needs: [defaults] - uses: ./.github/workflows/reusable_build_image.yaml + uses: $/.github/workflows/reusable_build_image.yaml secrets: harbor-robot-secret: ${{ secrets.HARBOR_ROBOT_SDP_GITHUB_ACTION_BUILD_SECRET }} quay-robot-secret: ${{ secrets.QUAY_ROBOT_SDP_GITHUB_ACTION_BUILD_SECRET }} diff --git a/.github/workflows/build_kafka.yaml b/.github/workflows/build_kafka.yaml index bf7701bfc..5489e9e31 100644 --- a/.github/workflows/build_kafka.yaml +++ b/.github/workflows/build_kafka.yaml @@ -84,7 +84,7 @@ jobs: build_image: name: Build Image(s) needs: [defaults] - uses: ./.github/workflows/reusable_build_image.yaml + uses: $/.github/workflows/reusable_build_image.yaml secrets: harbor-robot-secret: ${{ secrets.HARBOR_ROBOT_SDP_GITHUB_ACTION_BUILD_SECRET }} quay-robot-secret: ${{ secrets.QUAY_ROBOT_SDP_GITHUB_ACTION_BUILD_SECRET }} diff --git a/.github/workflows/build_krb5.yaml b/.github/workflows/build_krb5.yaml index 757465ac7..ffc8d0e4c 100644 --- a/.github/workflows/build_krb5.yaml +++ b/.github/workflows/build_krb5.yaml @@ -79,7 +79,7 @@ jobs: build_image: name: Build Image(s) needs: [defaults] - uses: ./.github/workflows/reusable_build_image.yaml + uses: $/.github/workflows/reusable_build_image.yaml secrets: harbor-robot-secret: ${{ secrets.HARBOR_ROBOT_SDP_GITHUB_ACTION_BUILD_SECRET }} quay-robot-secret: ${{ secrets.QUAY_ROBOT_SDP_GITHUB_ACTION_BUILD_SECRET }} diff --git a/.github/workflows/build_nifi.yaml b/.github/workflows/build_nifi.yaml index 62447fb65..68a20d978 100644 --- a/.github/workflows/build_nifi.yaml +++ b/.github/workflows/build_nifi.yaml @@ -83,7 +83,7 @@ jobs: build_image: name: Build Image(s) needs: [defaults] - uses: ./.github/workflows/reusable_build_image.yaml + uses: $/.github/workflows/reusable_build_image.yaml secrets: harbor-robot-secret: ${{ secrets.HARBOR_ROBOT_SDP_GITHUB_ACTION_BUILD_SECRET }} quay-robot-secret: ${{ secrets.QUAY_ROBOT_SDP_GITHUB_ACTION_BUILD_SECRET }} diff --git a/.github/workflows/build_omid.yaml b/.github/workflows/build_omid.yaml index 10024a5c4..ed769b8d6 100644 --- a/.github/workflows/build_omid.yaml +++ b/.github/workflows/build_omid.yaml @@ -83,7 +83,7 @@ jobs: build_image: name: Build Image(s) needs: [defaults] - uses: ./.github/workflows/reusable_build_image.yaml + uses: $/.github/workflows/reusable_build_image.yaml secrets: harbor-robot-secret: ${{ secrets.HARBOR_ROBOT_SDP_GITHUB_ACTION_BUILD_SECRET }} quay-robot-secret: ${{ secrets.QUAY_ROBOT_SDP_GITHUB_ACTION_BUILD_SECRET }} diff --git a/.github/workflows/build_opa.yaml b/.github/workflows/build_opa.yaml index 0d30fe73b..f24504d61 100644 --- a/.github/workflows/build_opa.yaml +++ b/.github/workflows/build_opa.yaml @@ -81,7 +81,7 @@ jobs: build_image: name: Build Image(s) needs: [defaults] - uses: ./.github/workflows/reusable_build_image.yaml + uses: $/.github/workflows/reusable_build_image.yaml secrets: harbor-robot-secret: ${{ secrets.HARBOR_ROBOT_SDP_GITHUB_ACTION_BUILD_SECRET }} quay-robot-secret: ${{ secrets.QUAY_ROBOT_SDP_GITHUB_ACTION_BUILD_SECRET }} diff --git a/.github/workflows/build_opensearch.yaml b/.github/workflows/build_opensearch.yaml index 363baaf3e..e9e0dac27 100644 --- a/.github/workflows/build_opensearch.yaml +++ b/.github/workflows/build_opensearch.yaml @@ -84,7 +84,7 @@ jobs: build_image: name: Build Image(s) needs: [defaults] - uses: ./.github/workflows/reusable_build_image.yaml + uses: $/.github/workflows/reusable_build_image.yaml secrets: harbor-robot-secret: ${{ secrets.HARBOR_ROBOT_SDP_GITHUB_ACTION_BUILD_SECRET }} quay-robot-secret: ${{ secrets.QUAY_ROBOT_SDP_GITHUB_ACTION_BUILD_SECRET }} diff --git a/.github/workflows/build_opensearch_dashboards.yaml b/.github/workflows/build_opensearch_dashboards.yaml index 5fad40646..3676123be 100644 --- a/.github/workflows/build_opensearch_dashboards.yaml +++ b/.github/workflows/build_opensearch_dashboards.yaml @@ -82,7 +82,7 @@ jobs: build_image: name: Build Image(s) needs: [defaults] - uses: ./.github/workflows/reusable_build_image.yaml + uses: $/.github/workflows/reusable_build_image.yaml secrets: harbor-robot-secret: ${{ secrets.HARBOR_ROBOT_SDP_GITHUB_ACTION_BUILD_SECRET }} quay-robot-secret: ${{ secrets.QUAY_ROBOT_SDP_GITHUB_ACTION_BUILD_SECRET }} diff --git a/.github/workflows/build_spark-connect-client.yaml b/.github/workflows/build_spark-connect-client.yaml index b1d8f1153..483a67b73 100644 --- a/.github/workflows/build_spark-connect-client.yaml +++ b/.github/workflows/build_spark-connect-client.yaml @@ -82,7 +82,7 @@ jobs: build_image: name: Build Image(s) needs: [defaults] - uses: ./.github/workflows/reusable_build_image.yaml + uses: $/.github/workflows/reusable_build_image.yaml secrets: harbor-robot-secret: ${{ secrets.HARBOR_ROBOT_STACKABLE_GITHUB_ACTION_BUILD_SECRET }} slack-token: ${{ secrets.SLACK_CONTAINER_IMAGE_TOKEN }} diff --git a/.github/workflows/build_spark-k8s.yaml b/.github/workflows/build_spark-k8s.yaml index e24b1c861..9fd17ecda 100644 --- a/.github/workflows/build_spark-k8s.yaml +++ b/.github/workflows/build_spark-k8s.yaml @@ -84,7 +84,7 @@ jobs: build_image: name: Build Image(s) needs: [defaults] - uses: ./.github/workflows/reusable_build_image.yaml + uses: $/.github/workflows/reusable_build_image.yaml secrets: harbor-robot-secret: ${{ secrets.HARBOR_ROBOT_SDP_GITHUB_ACTION_BUILD_SECRET }} quay-robot-secret: ${{ secrets.QUAY_ROBOT_SDP_GITHUB_ACTION_BUILD_SECRET }} diff --git a/.github/workflows/build_stackable-base.yaml b/.github/workflows/build_stackable-base.yaml index ad4c16bcd..234883351 100644 --- a/.github/workflows/build_stackable-base.yaml +++ b/.github/workflows/build_stackable-base.yaml @@ -80,7 +80,7 @@ jobs: build_image: name: Build Image(s) needs: [defaults] - uses: ./.github/workflows/reusable_build_image.yaml + uses: $/.github/workflows/reusable_build_image.yaml secrets: harbor-robot-secret: ${{ secrets.HARBOR_ROBOT_SDP_GITHUB_ACTION_BUILD_SECRET }} quay-robot-secret: ${{ secrets.QUAY_ROBOT_SDP_GITHUB_ACTION_BUILD_SECRET }} diff --git a/.github/workflows/build_superset.yaml b/.github/workflows/build_superset.yaml index 14d2881e9..88b89afd2 100644 --- a/.github/workflows/build_superset.yaml +++ b/.github/workflows/build_superset.yaml @@ -81,7 +81,7 @@ jobs: build_image: name: Build Image(s) needs: [defaults] - uses: ./.github/workflows/reusable_build_image.yaml + uses: $/.github/workflows/reusable_build_image.yaml secrets: harbor-robot-secret: ${{ secrets.HARBOR_ROBOT_SDP_GITHUB_ACTION_BUILD_SECRET }} quay-robot-secret: ${{ secrets.QUAY_ROBOT_SDP_GITHUB_ACTION_BUILD_SECRET }} diff --git a/.github/workflows/build_testing-tools.yaml b/.github/workflows/build_testing-tools.yaml index 0ad8b9a32..f94da2c50 100644 --- a/.github/workflows/build_testing-tools.yaml +++ b/.github/workflows/build_testing-tools.yaml @@ -87,7 +87,7 @@ jobs: - testing-tools/nifi - testing-tools/trino - testing-tools/hive - uses: ./.github/workflows/reusable_build_image.yaml + uses: $/.github/workflows/reusable_build_image.yaml secrets: harbor-robot-secret: ${{ secrets.HARBOR_ROBOT_SDP_GITHUB_ACTION_BUILD_SECRET }} quay-robot-secret: ${{ secrets.QUAY_ROBOT_SDP_GITHUB_ACTION_BUILD_SECRET }} diff --git a/.github/workflows/build_tools.yaml b/.github/workflows/build_tools.yaml index 82670670c..a6b80831b 100644 --- a/.github/workflows/build_tools.yaml +++ b/.github/workflows/build_tools.yaml @@ -80,7 +80,7 @@ jobs: build_image: name: Build Image(s) needs: [defaults] - uses: ./.github/workflows/reusable_build_image.yaml + uses: $/.github/workflows/reusable_build_image.yaml secrets: harbor-robot-secret: ${{ secrets.HARBOR_ROBOT_SDP_GITHUB_ACTION_BUILD_SECRET }} quay-robot-secret: ${{ secrets.QUAY_ROBOT_SDP_GITHUB_ACTION_BUILD_SECRET }} diff --git a/.github/workflows/build_trino-cli.yaml b/.github/workflows/build_trino-cli.yaml index cbe2c1c89..49c9352d7 100644 --- a/.github/workflows/build_trino-cli.yaml +++ b/.github/workflows/build_trino-cli.yaml @@ -82,7 +82,7 @@ jobs: build_image: name: Build Image(s) needs: [defaults] - uses: ./.github/workflows/reusable_build_image.yaml + uses: $/.github/workflows/reusable_build_image.yaml secrets: harbor-robot-secret: ${{ secrets.HARBOR_ROBOT_SDP_GITHUB_ACTION_BUILD_SECRET }} quay-robot-secret: ${{ secrets.QUAY_ROBOT_SDP_GITHUB_ACTION_BUILD_SECRET }} diff --git a/.github/workflows/build_trino.yaml b/.github/workflows/build_trino.yaml index 98003f846..0abb3d10e 100644 --- a/.github/workflows/build_trino.yaml +++ b/.github/workflows/build_trino.yaml @@ -83,7 +83,7 @@ jobs: build_image: name: Build Image(s) needs: [defaults] - uses: ./.github/workflows/reusable_build_image.yaml + uses: $/.github/workflows/reusable_build_image.yaml secrets: harbor-robot-secret: ${{ secrets.HARBOR_ROBOT_SDP_GITHUB_ACTION_BUILD_SECRET }} quay-robot-secret: ${{ secrets.QUAY_ROBOT_SDP_GITHUB_ACTION_BUILD_SECRET }} diff --git a/.github/workflows/build_vector.yaml b/.github/workflows/build_vector.yaml index ab541cf5a..db56df2a6 100644 --- a/.github/workflows/build_vector.yaml +++ b/.github/workflows/build_vector.yaml @@ -79,7 +79,7 @@ jobs: build_image: name: Build Image(s) needs: [defaults] - uses: ./.github/workflows/reusable_build_image.yaml + uses: $/.github/workflows/reusable_build_image.yaml secrets: harbor-robot-secret: ${{ secrets.HARBOR_ROBOT_SDP_GITHUB_ACTION_BUILD_SECRET }} quay-robot-secret: ${{ secrets.QUAY_ROBOT_SDP_GITHUB_ACTION_BUILD_SECRET }} diff --git a/.github/workflows/build_zookeeper.yaml b/.github/workflows/build_zookeeper.yaml index 1532742fe..37e26225d 100644 --- a/.github/workflows/build_zookeeper.yaml +++ b/.github/workflows/build_zookeeper.yaml @@ -83,7 +83,7 @@ jobs: build_image: name: Build Image(s) needs: [defaults] - uses: ./.github/workflows/reusable_build_image.yaml + uses: $/.github/workflows/reusable_build_image.yaml secrets: harbor-robot-secret: ${{ secrets.HARBOR_ROBOT_SDP_GITHUB_ACTION_BUILD_SECRET }} quay-robot-secret: ${{ secrets.QUAY_ROBOT_SDP_GITHUB_ACTION_BUILD_SECRET }} diff --git a/.github/workflows/precompile_hadoop.yaml b/.github/workflows/precompile_hadoop.yaml index 90b3b10d3..b32776ac5 100644 --- a/.github/workflows/precompile_hadoop.yaml +++ b/.github/workflows/precompile_hadoop.yaml @@ -35,7 +35,7 @@ jobs: build_image: name: Reusable Workflow - uses: ./.github/workflows/reusable_build_image.yaml + uses: $/.github/workflows/reusable_build_image.yaml needs: [generate_build_timestamp] secrets: harbor-robot-secret: ${{ secrets.HARBOR_ROBOT_PRECOMPILED_GITHUB_ACTION_BUILD_SECRET }} diff --git a/.pre-commit-config.yaml b/.pre-commit-config.yaml index ab3b2403c..02e0446b3 100644 --- a/.pre-commit-config.yaml +++ b/.pre-commit-config.yaml @@ -53,7 +53,7 @@ repos: - id: hadolint - repo: https://github.com/zizmorcore/zizmor-pre-commit - rev: 7fc963270df722f37707d47ff41265fe8f460822 # v1.20.0 + rev: fa412071e4f5d44d44f9e365f4676f9df92456a2 # v1.30.1 hooks: - id: zizmor args: ["--no-progress", "--min-confidence", "medium"]