ci: add support for actionlint (#152)

* add actionlint workflow

* apply actionlint fixes

* fix

Author: yfodil

.github/workflows/actionlint.yml

@@ -0,0 +1,12 @@
+name: Lint GitHub Actions workflows
+on: [push, pull_request]
+
+jobs:
+  actionlint:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - name: Check workflow files
+        uses: docker://rhysd/actionlint:latest
+        with:
+          args: -color -ignore SC2086

.github/workflows/ci.yml

@@ -54,7 +54,7 @@ jobs:
 
       - name: Find the Go Build Cache
         id: go
-        run: echo "::set-output name=cache::$(make go.cachedir)"
+        run: echo "cache=$(make go.cachedir)" >> "$GITHUB_OUTPUT"
 
       - name: Cache the Go Build Cache
         uses: actions/cache@v4
@@ -95,7 +95,7 @@ jobs:
 
       - name: Find the Go Build Cache
         id: go
-        run: echo "::set-output name=cache::$(make go.cachedir)"
+        run: echo "cache=$(make go.cachedir)" >> "$GITHUB_OUTPUT"
 
       - name: Cache the Go Build Cache
         uses: actions/cache@v4
@@ -128,7 +128,7 @@ jobs:
 
       - name: Find the Go Build Cache
         id: go
-        run: echo "::set-output name=cache::$(make go.cachedir)"
+        run: echo "cache=$(make go.cachedir)" >> "$GITHUB_OUTPUT"
 
       - name: Cache the Go Build Cache
         uses: actions/cache@v4
@@ -147,7 +147,7 @@ jobs:
         uses: codecov/codecov-action@v5
         with:
           flags: unittests
-          file: _output/tests/linux_amd64/coverage.txt
+          files: _output/tests/linux_amd64/coverage.txt
 
   local-deploy:
     runs-on: ubuntu-24.04
@@ -167,7 +167,7 @@ jobs:
 
       - name: Find the Go Build Cache
         id: go
-        run: echo "::set-output name=cache::$(make go.cachedir)"
+        run: echo "cache=$(make go.cachedir)" >> "$GITHUB_OUTPUT"
 
       - name: Cache the Go Build Cache
         uses: actions/cache@v4
@@ -222,7 +222,7 @@ jobs:
 
       - name: Find the Go Build Cache
         id: go
-        run: echo "::set-output name=cache::$(make go.cachedir)"
+        run: echo "cache=$(make go.cachedir)" >> "$GITHUB_OUTPUT"
 
       - name: Cache the Go Build Cache
         uses: actions/cache@v4
@@ -248,4 +248,4 @@ jobs:
           path: _output/**
 
       - name: Publish Artifacts
-        run: make publish BRANCH_NAME=${GITHUB_REF##*/}
+        run: make publish BRANCH_NAME="${GITHUB_REF##*/}"

.github/workflows/codeql.yml

@@ -17,7 +17,6 @@ on:
   pull_request:
     # The branches below must be a subset of the branches above
     branches: [ "main" ]
-  merge_group:
   schedule:
     - cron: '26 4 * * 2'
 

.github/workflows/e2e.yaml

@@ -53,26 +53,31 @@ jobs:
           gh pr checkout ${{ github.event.issue.number }}
           git submodule update --init --recursive
           OUTPUT=$(git log -1 --format='%H')
-          echo "commit-sha=$OUTPUT" >> $GITHUB_OUTPUT
+          echo "commit-sha=$OUTPUT" >> "$GITHUB_OUTPUT"
 
       - name: Prepare The Example List
         env:
           COMMENT: ${{ github.event.comment.body }}
         id: get-example-list-name
         run: |
-          PATHS=$(echo $COMMENT | sed 's/^.*\/test-examples="//g' | cut -d '"' -f 1 | sed 's/,/ /g')
+          PATHS=$(echo "$COMMENT" | sed 's/^.*\/test-examples="//g' | cut -d '"' -f 1 | sed 's/,/ /g')
           EXAMPLE_LIST=""
-          for P in $PATHS; do EXAMPLE_LIST="${EXAMPLE_LIST},$(find $P -name '*.yaml' | tr '\n' ',')"; done
+          for P in $PATHS; do EXAMPLE_LIST="${EXAMPLE_LIST},$(find "$P" -name '*.yaml' | tr '\n' ',')"; done
 
           sudo apt-get -y install coreutils
-          COUNT=$(echo ${EXAMPLE_LIST:1} | grep -o ".yaml" | wc -l)
-          if [ $COUNT -gt 1 ]; then EXAMPLE_HASH=$(echo ${EXAMPLE_LIST} | md5sum | cut -f1 -d" "); else EXAMPLE_HASH=$(echo ${EXAMPLE_LIST:1} | sed 's/.$//'); fi
+          COUNT=$(echo "${EXAMPLE_LIST:1}" | grep -o ".yaml" | wc -l)
+          if [ "$COUNT" -gt 1 ]; then 
+            EXAMPLE_HASH=$(echo "${EXAMPLE_LIST}" | md5sum | cut -f1 -d" ");
+          else 
+            EXAMPLE_HASH=${EXAMPLE_LIST:1}
+            EXAMPLE_HASH=${EXAMPLE_HASH%,}
+          fi
 
           echo "Examples: ${EXAMPLE_LIST:1}"
           echo "Example Hash: ${EXAMPLE_HASH}"
 
-          echo "example-list=${EXAMPLE_LIST:1}" >> $GITHUB_OUTPUT
-          echo "example-hash=${EXAMPLE_HASH}" >> $GITHUB_OUTPUT
+          echo "example-list=${EXAMPLE_LIST:1}" >> "$GITHUB_OUTPUT"
+          echo "example-hash=${EXAMPLE_HASH}" >> "$GITHUB_OUTPUT"
 
       - name: Create Pending Status Check
         env:
@@ -123,7 +128,7 @@ jobs:
           gh pr checkout ${{ github.event.issue.number }}
           git submodule update --init --recursive
           OUTPUT=$(git log -1 --format='%H')
-          echo "commit-sha=$OUTPUT" >> $GITHUB_OUTPUT
+          echo "commit-sha=$OUTPUT" >> "$GITHUB_OUTPUT"
 
       - name: Vendor Dependencies
         run: make vendor vendor.check
@@ -169,7 +174,7 @@ jobs:
       - name: Cleanup
         if: always()
         run: |
-          eval $(make --no-print-directory build.vars)
+          eval "$(make --no-print-directory build.vars)"
           ${KUBECTL} delete managed --all || true
 
       - name: Create Unsuccessful Status Check