Files
docker-agent/scripts
Arnaud Héritier 2771d89ed3 ci: gate job, merged image job, shared composite actions
- `gate` is the single job the main ruleset needs to require: it needs
  every blocking job (now also test-windows, cross-compile and image) and
  passes on success or skip, so adding a check no longer touches the ruleset;
  `publish` needs `gate` instead of listing every job.
- `build-image` and `build-and-push-image` duplicated ~120 lines and differed
  only by exporter/attestations/build args; one `image` job now decides
  publish vs cache-only in a step and feeds both build-push steps.
- OIDC validation, Hub login and builder setup move to `setup-buildx`; Task
  install moves into `setup-go`, which also saves the cache itself on main
  (actions/cache post step) so jobs lose their Save Go caches step.
- `lint` gains the parts of `task lint` CI never ran (project cops, go mod
  tidy) plus shellcheck on every script and the models-delta golden test,
  replacing the models-delta-lint workflow.
- Jobs renamed to short nouns: test, test-windows, cross-compile, licenses,
  image, publish. Actions bumped to the latest allow-listed versions
  (checkout v7.0.1, setup-go v7.0.0, setup-task v2.2.0, docker/* majors on
  Node 24, golangci-lint v2.13.2, Task 3.53.1).
- The run-commit sanity checks that only re-verified actions/checkout are
  dropped; the expected_sha input and OIDC config checks remain.
2026-09-10 16:04:32 +02:00
..