veilor-org/veilor-os
1
0
Fork 0
Code Issues Pull requests Projects Releases 1 Packages Wiki Activity Actions

Merge pull request 'ci: pin actions to node20-safe tags + runner sock pass-through' (#8) from feat/runner-fix-docker-sock-and-node20 into main
Some checks failed
Build veilor-os ISO / Build live ISO (push) Failing after 0s
Details
Lint / Kickstart syntax (push) Failing after 0s
Details
Lint / Shell scripts (push) Failing after 0s
Details
Lint / No personal/onyx leaks (push) Has been cancelled
Details

Browse source
This commit is contained in:
s8n-ru 2026-05-06 13:47:20 +01:00
commit 1db860c557
2 changed files with 16 additions and 6 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

13
.github/workflows/build-iso.yml vendored
View file

@ -30,7 +30,9 @@ jobs:
steps: steps:
- name: Checkout - name: Checkout
uses: actions/checkout@v4 # Pinned to last v4 tag confirmed to ship on node20. v4.2+ ships
# node24 which forgejo-runner v6.4.0 (node20) cannot exec.
uses: actions/checkout@v4.1.7
- name: Free up disk - name: Free up disk
run: | run: |
@ -39,6 +41,9 @@ jobs:
df -h df -h
- name: Run build inside Fedora 43 container - name: Run build inside Fedora 43 container
# v3 is composite/docker-based — no node runtime in the action
# itself. Safe under node20 forgejo-runner. TODO(infra): consider
# SHA pinning in a follow-up sweep.
uses: addnab/docker-run-action@v3 uses: addnab/docker-run-action@v3
with: with:
image: registry.fedoraproject.org/fedora:43 image: registry.fedoraproject.org/fedora:43
@ -199,7 +204,8 @@ jobs:
- name: Publish to ci-latest rolling prerelease - name: Publish to ci-latest rolling prerelease
if: success() && github.ref == 'refs/heads/main' if: success() && github.ref == 'refs/heads/main'
uses: softprops/action-gh-release@v2 # Pinned to last v2 tag confirmed to ship on node20.
uses: softprops/action-gh-release@v2.0.4
with: with:
tag_name: ci-latest tag_name: ci-latest
name: "ci-latest (auto)" name: "ci-latest (auto)"
@ -233,7 +239,8 @@ jobs:
- name: Attach to release on tag - name: Attach to release on tag
if: github.event_name == 'release' if: github.event_name == 'release'
uses: softprops/action-gh-release@v2 # Pinned to last v2 tag confirmed to ship on node20.
uses: softprops/action-gh-release@v2.0.4
with: with:
files: | files: |
build/out/*.iso build/out/*.iso

9
.github/workflows/lint.yml vendored
View file

@ -12,7 +12,8 @@ jobs:
container: container:
image: registry.fedoraproject.org/fedora:43 image: registry.fedoraproject.org/fedora:43
steps: steps:
- uses: actions/checkout@v4 # Pinned to last v4 tag confirmed to ship on node20.
- uses: actions/checkout@v4.1.7
- run: dnf -y install pykickstart - run: dnf -y install pykickstart
- run: ksvalidator kickstart/veilor-os.ks - run: ksvalidator kickstart/veilor-os.ks
@ -20,7 +21,8 @@ jobs:
name: Shell scripts name: Shell scripts
runs-on: ubuntu-24.04 runs-on: ubuntu-24.04
steps: steps:
- uses: actions/checkout@v4 # Pinned to last v4 tag confirmed to ship on node20.
- uses: actions/checkout@v4.1.7
- uses: ludeeus/action-shellcheck@master - uses: ludeeus/action-shellcheck@master
with: with:
severity: warning severity: warning
@ -30,7 +32,8 @@ jobs:
name: No personal/onyx leaks name: No personal/onyx leaks
runs-on: ubuntu-24.04 runs-on: ubuntu-24.04
steps: steps:
- uses: actions/checkout@v4 # Pinned to last v4 tag confirmed to ship on node20.
- uses: actions/checkout@v4.1.7
- name: Grep for leaks - name: Grep for leaks
run: | run: |
set -e set -e