Skip to content

Use self-repository $/ syntax for local action references - #47

Merged
blink1073 merged 1 commit into
Calysto:mainfrom
blink1073:use-local-actions
Aug 1, 2026
Merged

Use self-repository $/ syntax for local action references#47
blink1073 merged 1 commit into
Calysto:mainfrom
blink1073:use-local-actions

Conversation

@blink1073

@blink1073 blink1073 commented Aug 1, 2026

Copy link
Copy Markdown
Contributor

Summary

  • Switch all internal uses: ./actions/... references to GitHub's new self-repository uses: $/actions/... syntax (zizmor v1.29.0 added auditing support for it; GitHub announced it on 2026-07-30). It resolves to the running commit without needing a checkout, and keeps internal refs consistent even when callers pin to a full SHA.
  • Drop the now-unnecessary actions/checkout step in enforce-label.yml — it only existed to enable the old ./ reference.
  • Add .github/actionlint.yaml with a narrowly-scoped ignore for actionlint's ref is missing false positive on $/ refs, since actionlint doesn't support this syntax yet (rhysd/actionlint#711). Remove once that lands upstream.

Test plan

  • just pre-commit --hook-stage=manual passes (actionlint clean via the scoped ignore)
  • just pre-commit passes
  • CI green on this PR (workflows, zizmor, codeql)

GitHub Actions now supports referencing same-repository actions via
uses: $/path instead of ./path, which resolves at the running commit
without requiring a checkout. zizmor v1.29.0 added auditing support
for this syntax.

Drops the now-unnecessary checkout step in enforce-label.yml, and adds
a scoped actionlint ignore for the "ref is missing" false positive
actionlint currently raises for $/ references (rhysd/actionlint#711).

Also bumps zizmor-action to v0.6.2, which bundles zizmor 1.29.0 (the
release that added $/ support) as its default version.
@blink1073
blink1073 merged commit f112e9d into Calysto:main Aug 1, 2026
24 checks passed
@blink1073
blink1073 deleted the use-local-actions branch August 1, 2026 21:50
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant