fix(reusable): check out github-workflows at github.job_workflow_sha

.github/workflows/ci.yml

@@ -37,7 +37,7 @@ jobs:
           sudo install /tmp/actionlint /usr/local/bin/actionlint
 
       - name: Lint workflows
-        run: actionlint .github/workflows/*.yml
+        run: actionlint -ignore 'property "job_workflow_sha" is not defined' .github/workflows/*.yml
 
   yaml-validity:
     name: YAML Validity

.github/workflows/deploy-config-render-drift.yml

@@ -57,7 +57,7 @@ jobs:
       - uses: actions/checkout@v6
         with:
           repository: JorisJonkers-dev/github-workflows
-          ref: ${{ steps.workflow-ref.outputs.ref }}
+          ref: ${{ github.job_workflow_sha }}
           path: .github-workflows
           persist-credentials: false
 

.github/workflows/flux-render-validate.yml

@@ -57,7 +57,7 @@ jobs:
       - uses: actions/checkout@v6
         with:
           repository: JorisJonkers-dev/github-workflows
-          ref: ${{ steps.workflow-ref.outputs.ref }}
+          ref: ${{ github.job_workflow_sha }}
           path: .github-workflows
           persist-credentials: false
 

.github/workflows/gitops-ci.yml

@@ -64,7 +64,7 @@ jobs:
       - uses: actions/checkout@v6
         with:
           repository: JorisJonkers-dev/github-workflows
-          ref: ${{ steps.workflow-ref.outputs.ref }}
+          ref: ${{ github.job_workflow_sha }}
           path: .github-workflows
           persist-credentials: false
 

.github/workflows/jvm-ci.yml

@@ -58,26 +58,10 @@ jobs:
     steps:
       - uses: actions/checkout@v6
 
-      - name: Resolve workflow ref
-        id: workflow-ref
-        shell: bash
-        env:
-          WORKFLOW_REF: ${{ github.workflow_ref }}
-        run: |
-          set -euo pipefail
-
-          ref="${WORKFLOW_REF#*@}"
-          if [ -z "$ref" ] || [ "$ref" = "$WORKFLOW_REF" ]; then
-            echo "::error::Unable to resolve reusable workflow ref from $WORKFLOW_REF"
-            exit 1
-          fi
-
-          printf 'ref=%s\n' "$ref" >> "$GITHUB_OUTPUT"
-
       - uses: actions/checkout@v6
         with:
           repository: JorisJonkers-dev/github-workflows
-          ref: ${{ steps.workflow-ref.outputs.ref }}
+          ref: ${{ github.job_workflow_sha }}
           path: .github-workflows
           persist-credentials: false
 
@@ -97,26 +81,10 @@ jobs:
     steps:
       - uses: actions/checkout@v6
 
-      - name: Resolve workflow ref
-        id: workflow-ref
-        shell: bash
-        env:
-          WORKFLOW_REF: ${{ github.workflow_ref }}
-        run: |
-          set -euo pipefail
-
-          ref="${WORKFLOW_REF#*@}"
-          if [ -z "$ref" ] || [ "$ref" = "$WORKFLOW_REF" ]; then
-            echo "::error::Unable to resolve reusable workflow ref from $WORKFLOW_REF"
-            exit 1
-          fi
-
-          printf 'ref=%s\n' "$ref" >> "$GITHUB_OUTPUT"
-
       - uses: actions/checkout@v6
         with:
           repository: JorisJonkers-dev/github-workflows
-          ref: ${{ steps.workflow-ref.outputs.ref }}
+          ref: ${{ github.job_workflow_sha }}
           path: .github-workflows
           persist-credentials: false
 

.github/workflows/migration-guard.yml

@@ -56,7 +56,7 @@ jobs:
       - uses: actions/checkout@v6
         with:
           repository: JorisJonkers-dev/github-workflows
-          ref: ${{ steps.workflow-ref.outputs.ref }}
+          ref: ${{ github.job_workflow_sha }}
           path: .github-workflows
           persist-credentials: false
 

.github/workflows/node-ci.yml

@@ -83,7 +83,7 @@ jobs:
       - uses: actions/checkout@v6
         with:
           repository: JorisJonkers-dev/github-workflows
-          ref: ${{ steps.workflow-ref.outputs.ref }}
+          ref: ${{ github.job_workflow_sha }}
           path: .github-workflows
           persist-credentials: false
 

.github/workflows/platform-config-validate.yml

@@ -66,7 +66,7 @@ jobs:
       - uses: actions/checkout@v6
         with:
           repository: JorisJonkers-dev/github-workflows
-          ref: ${{ steps.workflow-ref.outputs.ref }}
+          ref: ${{ github.job_workflow_sha }}
           path: .github-workflows
           persist-credentials: false