Consolidate GitHub Actions linting

.github/workflows/ci.yml

@@ -15,17 +15,15 @@ jobs:
     if: ${{ always() }}
     needs:
       - changed-files
-      - ghalint
       - jactionlint
-      - zizmor
       - build
       - check
       - commitlint
       - compile
       - editorconfig
       - ryl
     runs-on: ubuntu-slim
-    timeout-minutes: 60
+    timeout-minutes: 15
     steps:
       - name: Fail if any required jobs failed or cancelled
         if: ${{ contains(needs.*.result, 'failure') || contains(needs.*.result, 'cancelled') }}
@@ -35,14 +33,14 @@ jobs:
     name: Get changed files
     if: ${{ github.event_name == 'pull_request' }}
     runs-on: ubuntu-slim
-    timeout-minutes: 60
+    timeout-minutes: 15
     permissions:
       contents: read
     outputs:
       # reference: https://github.com/tj-actions/changed-files#outputs-
-      actions: ${{ steps.changed-files.outputs.actions_any_modified == 'true' }}
       build: ${{ steps.changed-files.outputs.build_any_modified == 'true' }}
       compile: ${{ steps.changed-files.outputs.compile_any_modified == 'true' }}
+      jactionlint: ${{ steps.changed-files.outputs.actions_any_modified == 'true' }}
       ryl: ${{ steps.changed-files.outputs.ryl_any_modified == 'true' }}
     steps:
       - name: Checkout
@@ -62,10 +60,6 @@ jobs:
               - mise.lock
               - mise.toml
               - pnpm-lock.yaml
-            actions:
-              - *dependencies
-              - "**/action.{yaml,yml}"
-              - ".github/workflows/*.{yaml,yml}"
             build:
               - *common
               - *dependencies
@@ -74,35 +68,19 @@ jobs:
               - *common
               - *dependencies
               - "packages/**/*.{ts,tsx}"
+            jactionlint:
+              - *dependencies
+              - "**/action.{yaml,yml}"
+              - ".github/workflows/*.{yaml,yml}"
+              - .github/jactionlint.yaml
             ryl:
               - *common
               - *dependencies
               - "**/*.{yaml,yml}"
-  ghalint:
-    name: ghalint
-    if: ${{ always() && !failure() && !cancelled() &&
-      (needs.changed-files.result == 'skipped' || needs.changed-files.outputs.actions == 'true') }}
-    needs: changed-files
-    runs-on: ubuntu-slim
-    timeout-minutes: 60
-    permissions:
-      contents: read
-    steps:
-      - name: Checkout
-        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
-        with:
-          persist-credentials: false
-      - name: Set up mise
-        uses: jdx/mise-action@2d8d4cafcbd33be2ea37d2b6f5ad595363d1f1ca # v5.1.1
-      - name: Run ghalint
-        run: |
-          ghalint run
-          ghalint act
-        shell: bash
   jactionlint:
     name: jactionlint
     if: ${{ always() && !failure() && !cancelled() &&
-      (needs.changed-files.result == 'skipped' || needs.changed-files.outputs.actions == 'true') }}
+      (needs.changed-files.result == 'skipped' || needs.changed-files.outputs.jactionlint == 'true') }}
     needs: changed-files
     runs-on: ubuntu-26.04
     timeout-minutes: 60
@@ -118,27 +96,6 @@ jobs:
       - name: Run jactionlint
         run: jactionlint --format=github --color
         shell: bash
-  zizmor:
-    name: zizmor
-    if: ${{ always() && !failure() && !cancelled() &&
-      (needs.changed-files.result == 'skipped' || needs.changed-files.outputs.actions == 'true') }}
-    needs: changed-files
-    runs-on: ubuntu-26.04
-    timeout-minutes: 60
-    permissions:
-      contents: read
-    steps:
-      - name: Checkout
-        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
-        with:
-          persist-credentials: false
-      - name: Set up mise
-        uses: jdx/mise-action@2d8d4cafcbd33be2ea37d2b6f5ad595363d1f1ca # v5.1.1
-      - name: Run zizmor
-        env:
-          GH_TOKEN: ${{ github.token }}
-        run: zizmor -p --format=github --min-severity=low .
-        shell: bash
   build:
     name: Build
     if: ${{ always() && !failure() && !cancelled() &&

hk.pkl

@@ -4,8 +4,6 @@ import "package://github.com/jdx/hk/releases/download/v2.6.0/hk@2.6.0#/Builtins.
 
 steps {
   ["editorconfig_checker"] = Builtins.editorconfig_checker
-  ["ghalint_action"] = Builtins.ghalint_action
-  ["ghalint_workflow"] = Builtins.ghalint_workflow
   ["jactionlint"] = Builtins.jactionlint
   ["ryl"] = Builtins.ryl
   ["vp_check"] = (Builtins.vp_check) {
@@ -22,7 +20,6 @@ steps {
       effect = "write"
     }
   }
-  ["zizmor"] = Builtins.zizmor
 }
 
 hooks {

mise.toml

@@ -9,8 +9,6 @@ _.path = [
 "aqua:owenlamont/ryl" = "latest"
 "npm:@commitlint/cli" = "latest"
 editorconfig-checker = "latest"
-ghalint = "latest"
 hk = "latest"
 jactionlint = "latest"
 shellcheck = "latest"
-zizmor = "latest"