dotCMS · spbolton · Nov 19, 2025
@@ -0,0 +1,7 @@
+# actionlint configuration
+# See https://github.com/rhysd/actionlint/blob/main/docs/config.md
+
+# Custom self-hosted runner labels
+self-hosted-runner:
+  labels:
+    - ubuntu-server  # Custom label used in security_scheduled_pentest.yml
@@ -8,7 +8,7 @@ inputs:
     default: ${{ github.token }}
 
 runs:
-  using: "composite"
+  using: 'composite'
   steps:
     - run: |
         curl -s -H "Authorization: token ${{ inputs.token }}" https://api.github.com/rate_limit

@@ -23,7 +23,7 @@ runs:
         echo '# Initial Disk Usage'
         df -h
         echo "Runner OS: $RUNNER_OS"
-        
+
         if [[ "$RUNNER_OS" == "macOS" ]]; then
           HOME_DIR="/Users/runner"
           echo '# du -sh $HOME_DIR'
@@ -81,7 +81,7 @@ runs:
           removeIfExists ${HOME_DIR}/.ghcup/bin/ghc
           removeIfExists ${HOME_DIR}/Library/Android/sdk
 
-          removeIfExists /usr/local/bin/pipx             
+          removeIfExists /usr/local/bin/pipx
           removeIfExists /usr/bin/swift
           removeIfExists /usr/local/bin/dotnet
           removeIfExists /usr/local/Caskroom/
@@ -119,4 +119,4 @@ runs:
           docker images || true
           echo '# du -sh $HOME_DIR'
           sudo du -sh $HOME_DIR || true
-        fi
+        fi
@@ -36,7 +36,7 @@ outputs:
     value: ${{ steps.npm-version-tag.outputs.npm-package-version-tag }}
 
 runs:
-  using: "composite"
+  using: 'composite'
   steps:
     - name: 'Checkout'
       uses: actions/checkout@v4
@@ -52,7 +52,6 @@ runs:
       run: pip install jinja2-cli
       shell: bash
 
-
     - name: 'Download all cli build artifacts.'
       id: download-cli-artifacts
       uses: actions/download-artifact@v4
@@ -71,7 +70,6 @@ runs:
         echo "::endgroup::"
       shell: bash
 
-
     - name: 'Extract package version'
       id: project
       run: |
@@ -127,7 +125,7 @@ runs:
           # Extract max RC version
           MAX_RC_VERSION=$(echo $LATEST_RC_VERSIONS | jq -r --arg filter $VERSION_NPM_FORMAT-rc 'map(.| select(. | contains($filter)) | sub($filter; "") | tonumber ) | max')
           echo "MAX_RC_VERSION: ${MAX_RC_VERSION}"
-        
+
           if [[ $MAX_RC_VERSION != null ]]; then
             RC_SUFFIX="-rc$(( $MAX_RC_VERSION + 1 ))"
           else
@@ -148,7 +146,6 @@ runs:
         echo "::endgroup::"
       shell: bash
 
-
     # Sets up the NPM package
     # Creates the bin folder with the binaries
     # Adds the postinstall.js script

@@ -59,10 +59,10 @@ inputs:
     default: ''
 outputs:
   tags:
-    description: "The tags that were used to build the image"
+    description: 'The tags that were used to build the image'
     value: ${{ steps.convert_tags.outputs.space_separated_tags }}
 runs:
-  using: "composite"
+  using: 'composite'
   steps:
     - name: Download Docker Build Context
       uses: actions/download-artifact@v4
@@ -97,17 +97,17 @@ runs:
         USE_REF: ${{ inputs.docker-use-ref }}
         VERSION: ${{ inputs.version }}
       run: |
-        
+
         # Set defaults for flags
         enable_latest=false
         RESULT=""
-        
+
         # Determine REF_TO_USE based on USE_REF
         REF_TO_USE=""
         if [[ "$USE_REF" == "true" && -n "$REF" ]]; then
           REF_TO_USE="$REF"
         fi
-        
+
         # Determine RESULT based on REF_TO_USE and VERSION
         if [[ -n "$REF_TO_USE" && -n "$VERSION" ]]; then
           RESULT="${REF_TO_USE}_${VERSION}"
@@ -119,12 +119,12 @@ runs:
           echo "ERROR: No version or ref provided"
           exit 1
         fi
-        
+
         # Conditional for setting latest version flag
         if [[ -n "$VERSION" && "$USE_REF" != "true" && "$LATEST" == "true" ]]; then
           enable_latest=true
         fi
-        
+
         echo "FULL_TAGS_OUTPUT<<EOF" >> $GITHUB_ENV
           echo "type=raw,value=${RESULT}_{{sha}},enable=true" >> $GITHUB_ENV
           echo "type=raw,value=${RESULT},enable=true" >> $GITHUB_ENV
@@ -189,4 +189,4 @@ runs:
         push: ${{ inputs.do_deploy }}
         cache-from: type=gha
         cache-to: type=gha,mode=max
-        build-args: ${{ inputs.build_args }}
+        build-args: ${{ inputs.build_args }}
@@ -12,7 +12,7 @@ inputs:
     description: 'The version of the release'
     required: true
   artifact-run-id:
-    description: 'The run id of the core artifacts'    
+    description: 'The run id of the core artifacts'
   aws-access-key-id:
     description: 'AWS Access Key ID'
     required: true
@@ -25,7 +25,7 @@ inputs:
     required: true
 
 runs:
-  using: "composite"
+  using: 'composite'
   steps:
     - name: 'Checkout'
       uses: actions/checkout@v4
@@ -34,19 +34,19 @@ runs:
 
     - uses: ./.github/actions/core-cicd/maven-job
       id: maven-clean
-      with:        
-        stage-name: "Clean Build"
-        maven-args: "clean install -DskipTests"
+      with:
+        stage-name: 'Clean Build'
+        maven-args: 'clean install -DskipTests'
         generate-docker: false
         cleanup-runner: true
         github-token: ${{ inputs.github-token }}
       if: inputs.artifact-run-id == ''
 
     - uses: ./.github/actions/core-cicd/maven-job
       id: maven-javadoc
-      with:        
-        stage-name: "Deploy Javadoc"
-        maven-args: "javadoc:javadoc -pl :dotcms-core"
+      with:
+        stage-name: 'Deploy Javadoc'
+        maven-args: 'javadoc:javadoc -pl :dotcms-core'
         generate-docker: false
         cleanup-runner: true
         restore-classes: true
@@ -58,7 +58,7 @@ runs:
       with:
         aws-access-key-id: ${{ inputs.aws-access-key-id }}
         aws-secret-access-key: ${{ inputs.aws-secret-access-key }}
-        aws-region: ${{ inputs.aws-region }} 
+        aws-region: ${{ inputs.aws-region }}
 
     - name: Generate/Push Javadoc
       if: success()
@@ -75,4 +75,4 @@ runs:
       env:
         AWS_ACCESS_KEY_ID: ${{ inputs.aws-access-key-id }}
         AWS_SECRET_ACCESS_KEY: ${{ inputs.aws-secret-access-key }}
-      shell: bash
+      shell: bash