Repository navigation
Use ubuntu-slim runner for lightweight workflow jobs - #1964
Conversation
- Switch labeler, spellcheck, publish and the test lint job to ubuntu-slim - Keep ubuntu-latest for Docker-based actions, CodeQL, the OS/Node test matrix and the website build Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01B4uAX78vP2cYisKwLmZgSP
Fixes zizmor cache-poisoning finding surfaced by Super-Linter. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01B4uAX78vP2cYisKwLmZgSP
Deploying htmlhint with
|
| Latest commit: |
719030c
|
| Status: | ✅ Deploy successful! |
| Preview URL: | https://3551b81c.htmlhint.pages.dev |
| Branch Preview URL: | https://ci-ubuntu-slim.htmlhint.pages.dev |
There was a problem hiding this comment.
🟢 Approval recommended
No active review issues were identified for the changes moving four GitHub Actions jobs to ubuntu-slim.
No open issues 🎉
What changed in this PR
Moves four lightweight GitHub Actions jobs to ubuntu-slim, while leaving heavier and Docker-dependent workflows on their existing runners.
Changes:
- Switches PR labeling, spellchecking, linting, and package publishing to
ubuntu-slim. - Leaves job steps and the test build matrix unchanged.
| File | Description |
|---|---|
.github/workflows/test.yml |
Moves only the lint job to ubuntu-slim. |
.github/workflows/spellcheck.yml |
Moves spellchecking to ubuntu-slim. |
.github/workflows/publish.yml |
Moves the build-and-publish job to ubuntu-slim. |
.github/workflows/labeler.yml |
Moves PR label triage to ubuntu-slim. |
Review effort: Balanced
Touching publish.yml makes Super-Linter run zizmor on it, which fails on the existing use-trusted-publishing finding. Keep it on ubuntu-latest so this PR stays limited to the runner switch. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01B4uAX78vP2cYisKwLmZgSP
|
The red Lint Code Base run on The Generated by Claude Code |
Requested by Christian · project thread
Short description of what this resolves
Moves the light GitHub Actions jobs from
ubuntu-latesttoubuntu-slim, the single-CPU container runner (fewer preinstalled tools, no Docker, 15-minute job limit).Proposed changes
Switched to
ubuntu-slim:labeler.yml(triage):actions/labeleris a Node actionspellcheck.yml(spellcheck):cspell-actionis a Node actiontest.yml(lint): checkout, setup-node,npm ci,npm run lintLeft on
ubuntu-latest:publish.yml: any edit makes Super-Linter run zizmor on the file, and it fails on the existinguse-trusted-publishingandcache-poisoningfindings. Moving to npm trusted publishing is a separate change.codeql-analysis.yml: CodeQL analysis is CPU and memory heavyossf-scorecard.yml:ossf/scorecard-actionis a Docker container action, whichubuntu-slimcannot runsync-labels.yml:micnncim/action-label-synceris a Docker container actionsuper-linter.yml: Super-Linter runs as a Docker imagetest.yml(build): OS/Node matrix that pairs withwindows-latest, and thematrix.os != 'ubuntu-latest'condition depends on the labelwebsite.yml: full Astro/Starlight build with full git history, which risks the 15-minute limit on a single CPUGenerated by Claude Code