From 3122fa651e0fb31535be596966b8d19d1166a77b Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Aur=C3=A9lien=20Bombo?= Date: Mon, 23 Mar 2026 12:10:07 -0500 Subject: [PATCH 1/2] gha: Avoid noisy deployment logs in PRs MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit GitHub recently announced that developers can now use environments without auto-deployment, which allows us to avoid the noisy deployment logs in our PRs: https://github.blog/changelog/2026-03-19-github-actions-late-march-2026-updates/#github-actions-now-allows-developers-to-use-environments-without-auto-deployment Signed-off-by: Aurélien Bombo --- .github/workflows/cleanup-resources.yaml | 4 +++- .github/workflows/run-k8s-tests-on-aks.yaml | 4 +++- .github/workflows/run-kata-coco-stability-tests.yaml | 4 +++- .github/workflows/run-kata-coco-tests.yaml | 12 +++++++++--- .github/workflows/run-kata-deploy-tests-on-aks.yaml | 4 +++- 5 files changed, 21 insertions(+), 7 deletions(-) diff --git a/.github/workflows/cleanup-resources.yaml b/.github/workflows/cleanup-resources.yaml index 77d623fb87..5a7e99bb7f 100644 --- a/.github/workflows/cleanup-resources.yaml +++ b/.github/workflows/cleanup-resources.yaml @@ -12,7 +12,9 @@ jobs: runs-on: ubuntu-22.04 permissions: id-token: write # Used for OIDC access to log into Azure - environment: ci + environment: + name: ci + deployment: false steps: - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 with: diff --git a/.github/workflows/run-k8s-tests-on-aks.yaml b/.github/workflows/run-k8s-tests-on-aks.yaml index 7649aed6eb..dfd8b0c0a2 100644 --- a/.github/workflows/run-k8s-tests-on-aks.yaml +++ b/.github/workflows/run-k8s-tests-on-aks.yaml @@ -58,7 +58,9 @@ jobs: permissions: contents: read id-token: write # Used for OIDC access to log into Azure - environment: ci + environment: + name: ci + deployment: false env: DOCKER_REGISTRY: ${{ inputs.registry }} DOCKER_REPO: ${{ inputs.repo }} diff --git a/.github/workflows/run-kata-coco-stability-tests.yaml b/.github/workflows/run-kata-coco-stability-tests.yaml index 7158233166..6c81d3f7a2 100644 --- a/.github/workflows/run-kata-coco-stability-tests.yaml +++ b/.github/workflows/run-kata-coco-stability-tests.yaml @@ -55,7 +55,9 @@ jobs: permissions: id-token: write # Used for OIDC access to log into Azure - environment: ci + environment: + name: ci + deployment: false env: DOCKER_REGISTRY: ${{ inputs.registry }} DOCKER_REPO: ${{ inputs.repo }} diff --git a/.github/workflows/run-kata-coco-tests.yaml b/.github/workflows/run-kata-coco-tests.yaml index 3b5ba0a19f..81d281ddc7 100644 --- a/.github/workflows/run-kata-coco-tests.yaml +++ b/.github/workflows/run-kata-coco-tests.yaml @@ -144,7 +144,9 @@ jobs: runs-on: ubuntu-24.04 permissions: contents: read - environment: ci + environment: + name: ci + deployment: false env: DOCKER_REGISTRY: ${{ inputs.registry }} DOCKER_REPO: ${{ inputs.repo }} @@ -269,7 +271,9 @@ jobs: runs-on: ubuntu-24.04 permissions: contents: read - environment: ci + environment: + name: ci + deployment: false env: DOCKER_REGISTRY: ${{ inputs.registry }} DOCKER_REPO: ${{ inputs.repo }} @@ -379,7 +383,9 @@ jobs: pull-type: - default runs-on: ubuntu-24.04 - environment: ci + environment: + name: ci + deployment: false env: DOCKER_REGISTRY: ${{ inputs.registry }} DOCKER_REPO: ${{ inputs.repo }} diff --git a/.github/workflows/run-kata-deploy-tests-on-aks.yaml b/.github/workflows/run-kata-deploy-tests-on-aks.yaml index 92d77039c7..b7246af693 100644 --- a/.github/workflows/run-kata-deploy-tests-on-aks.yaml +++ b/.github/workflows/run-kata-deploy-tests-on-aks.yaml @@ -48,7 +48,9 @@ jobs: - host_os: cbl-mariner vmm: clh runs-on: ubuntu-22.04 - environment: ci + environment: + name: ci + deployment: false permissions: id-token: write # Used for OIDC access to log into Azure env: From 78289d19f74e18257758c9112a786b4031dd1983 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Aur=C3=A9lien=20Bombo?= Date: Mon, 23 Mar 2026 12:35:34 -0500 Subject: [PATCH 2/2] gha: Pin actionlint version MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Pin to the latest released version as a security measure. Signed-off-by: Aurélien Bombo --- .github/workflows/actionlint.yaml | 2 ++ 1 file changed, 2 insertions(+) diff --git a/.github/workflows/actionlint.yaml b/.github/workflows/actionlint.yaml index 9f06235b02..77f8cad939 100644 --- a/.github/workflows/actionlint.yaml +++ b/.github/workflows/actionlint.yaml @@ -23,3 +23,5 @@ jobs: - name: Run actionlint uses: raven-actions/actionlint@e01d1ea33dd6a5ed517d95b4c0c357560ac6f518 # v2.1.1 + with: + version: '1.7.12'