gha: Pin actionlint version

Pin to the latest released version as a security measure. Signed-off-by: Aurélien Bombo <abombo@microsoft.com>
gha: Avoid pesky deployment logs in PRs
2026-03-24 05:32:06 +00:00 · 2026-03-23 12:35:34 -05:00 · 2026-03-23 12:10:07 -05:00
6 changed files with 23 additions and 7 deletions
--- a/.github/workflows/actionlint.yaml
+++ b/.github/workflows/actionlint.yaml
@@ -23,3 +23,5 @@ jobs:

      - name: Run actionlint
        uses: raven-actions/actionlint@e01d1ea33dd6a5ed517d95b4c0c357560ac6f518  # v2.1.1
+        with:
+          version: '1.7.11'
--- a/.github/workflows/cleanup-resources.yaml
+++ b/.github/workflows/cleanup-resources.yaml
@@ -12,7 +12,9 @@ jobs:
    runs-on: ubuntu-22.04
    permissions:
      id-token: write # Used for OIDC access to log into Azure
-    environment: ci
+    environment:
+      name: ci
+      deployment: false
    steps:
      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
        with:
--- a/.github/workflows/run-k8s-tests-on-aks.yaml
+++ b/.github/workflows/run-k8s-tests-on-aks.yaml
@@ -58,7 +58,9 @@ jobs:
    permissions:
      contents: read
      id-token: write # Used for OIDC access to log into Azure
-    environment: ci
+    environment:
+      name: ci
+      deployment: false
    env:
      DOCKER_REGISTRY: ${{ inputs.registry }}
      DOCKER_REPO: ${{ inputs.repo }}
--- a/.github/workflows/run-kata-coco-stability-tests.yaml
+++ b/.github/workflows/run-kata-coco-stability-tests.yaml
@@ -55,7 +55,9 @@ jobs:
    permissions:

      id-token: write # Used for OIDC access to log into Azure
-    environment: ci
+    environment:
+      name: ci
+      deployment: false
    env:
      DOCKER_REGISTRY: ${{ inputs.registry }}
      DOCKER_REPO: ${{ inputs.repo }}
--- a/.github/workflows/run-kata-coco-tests.yaml
+++ b/.github/workflows/run-kata-coco-tests.yaml
@@ -144,7 +144,9 @@ jobs:
    runs-on: ubuntu-24.04
    permissions:
      contents: read
-    environment: ci
+    environment:
+      name: ci
+      deployment: false
    env:
      DOCKER_REGISTRY: ${{ inputs.registry }}
      DOCKER_REPO: ${{ inputs.repo }}
@@ -269,7 +271,9 @@ jobs:
    runs-on: ubuntu-24.04
    permissions:
      contents: read
-    environment: ci
+    environment:
+      name: ci
+      deployment: false
    env:
      DOCKER_REGISTRY: ${{ inputs.registry }}
      DOCKER_REPO: ${{ inputs.repo }}
@@ -379,7 +383,9 @@ jobs:
        pull-type:
          - default
    runs-on: ubuntu-24.04
-    environment: ci
+    environment:
+      name: ci
+      deployment: false
    env:
      DOCKER_REGISTRY: ${{ inputs.registry }}
      DOCKER_REPO: ${{ inputs.repo }}
--- a/.github/workflows/run-kata-deploy-tests-on-aks.yaml
+++ b/.github/workflows/run-kata-deploy-tests-on-aks.yaml
@@ -48,7 +48,9 @@ jobs:
          - host_os: cbl-mariner
            vmm: clh
    runs-on: ubuntu-22.04
-    environment: ci
+    environment:
+      name: ci
+      deployment: false
    permissions:
      id-token: write # Used for OIDC access to log into Azure
    env: