From 79e4c505670cf9355ea13290dc7cd75b5f54c825 Mon Sep 17 00:00:00 2001 From: Till Rohrmann Date: Mon, 2 Nov 2026 17:04:45 +0100 Subject: [PATCH] Use the shared verify-lockfile workflow from restatedev/restate Call the reusable workflow instead of keeping a copy of the job, so the gh-actions-lock version is maintained in one place. Co-Authored-By: Claude Opus 5.5 --- .github/workflows/actions.lock | 8 +------- .github/workflows/verify-lockfile.yml | 10 +--------- 2 files changed, 2 insertions(+), 16 deletions(-) diff --git a/.github/workflows/actions.lock b/.github/workflows/actions.lock index 1aeb1793..cb8f49ef 100644 --- a/.github/workflows/actions.lock +++ b/.github/workflows/actions.lock @@ -36,8 +36,7 @@ workflows: - 'actions/checkout@v4.4.0' - 'astral-sh/setup-uv@v5.4.2' - 'extractions/setup-just@v2.0.0' - '.github/workflows/verify-lockfile.yml': - - 'actions/checkout@v7.0.1' + '.github/workflows/verify-lockfile.yml': [] dependencies: 'actions/attest-build-provenance@1176ef556905f349f669722abf30bce1a6e16e01': ref: 'predicate@1.1.5' @@ -67,11 +66,6 @@ dependencies: commit: 'sha1-d23441a48e516b6c34aea4fa41551a30e30af803' owner_id: 44036562 repo_id: 197814629 - 'actions/checkout@v7.0.1': - ref: 'v7.0.1' - commit: 'sha1-3d3c42e5aac5ba805825da76410c181273ba90b1' - owner_id: 44036562 - repo_id: 197814629 'actions/download-artifact@v4.3.0': ref: 'v4.3.0' commit: 'sha1-d3f86a106a0bac45b974a628896c90dbdf5c8093' diff --git a/.github/workflows/verify-lockfile.yml b/.github/workflows/verify-lockfile.yml index a4e433b5..4eb18961 100644 --- a/.github/workflows/verify-lockfile.yml +++ b/.github/workflows/verify-lockfile.yml @@ -14,12 +14,4 @@ permissions: jobs: verify: - runs-on: ubuntu-latest - env: - GH_TOKEN: ${{ github.token }} - steps: - - uses: actions/checkout@v7.0.1 - with: - persist-credentials: false - - run: gh extension install github/gh-actions-lock --pin v0.4.0 - - run: gh actions-lock --verify + uses: restatedev/restate/.github/workflows/verify-lockfile.yml@main