From a8eabe5beee3f0ba0486cd6b1db8c9fbd65df393 Mon Sep 17 00:00:00 2001
From: Tim Thacker <tim.thacker@nullify.cloud>
Date: Sun, 25 Oct 2026 00:20:32 +1100
Subject: [PATCH] perf(ci): move public CLI workflows to free GitHub runners

---
 .github/actionlint.yaml                 |  3 ---
 .github/workflows/ci-dockerfile.yml     |  2 +-
 .github/workflows/ci-go.yml             |  4 ++--
 .github/workflows/ci-require-labels.yml |  2 +-
 .github/workflows/release.yml           | 14 ++++++++++----
 .github/workflows/scorecard.yml         |  2 +-
 6 files changed, 15 insertions(+), 12 deletions(-)
 delete mode 100644 .github/actionlint.yaml

diff --git a/.github/actionlint.yaml b/.github/actionlint.yaml
deleted file mode 100644
index 95c913f..0000000
--- a/.github/actionlint.yaml
+++ /dev/null
@@ -1,3 +0,0 @@
-self-hosted-runner:
-  labels:
-    - office-ci-small
diff --git a/.github/workflows/ci-dockerfile.yml b/.github/workflows/ci-dockerfile.yml
index 31dd3d4..8beb312 100644
--- a/.github/workflows/ci-dockerfile.yml
+++ b/.github/workflows/ci-dockerfile.yml
@@ -7,7 +7,7 @@ on:
 run-name: CI Dockerfile by @${{ github.actor }} ${{ github.sha }}
 jobs:
   lint:
-    runs-on: office-ci-small
+    runs-on: ubuntu-24.04
     steps:
       - uses: actions/checkout@v6
       - name: hadolint
diff --git a/.github/workflows/ci-go.yml b/.github/workflows/ci-go.yml
index 90093ae..fbb9d8d 100644
--- a/.github/workflows/ci-go.yml
+++ b/.github/workflows/ci-go.yml
@@ -9,7 +9,7 @@ on:
 run-name: CI Go by @${{ github.actor }} ${{ github.sha }}
 jobs:
   build-test:
-    runs-on: office-ci-small
+    runs-on: ubuntu-24.04
     steps:
       - uses: actions/checkout@v6
       - uses: actions/setup-go@v6
@@ -25,7 +25,7 @@ jobs:
         id: extract_version
         run: |
           version=$(sh scripts/get_golangci_lint_version.sh)
-          echo "golangci_lint_version=$version" >> $GITHUB_OUTPUT
+          echo "golangci_lint_version=$version" >> "$GITHUB_OUTPUT"
       - name: golangci-lint
         uses: golangci/golangci-lint-action@v9
         with:
diff --git a/.github/workflows/ci-require-labels.yml b/.github/workflows/ci-require-labels.yml
index 88c92d6..381d5d1 100644
--- a/.github/workflows/ci-require-labels.yml
+++ b/.github/workflows/ci-require-labels.yml
@@ -11,7 +11,7 @@ permissions:
 jobs:
   require-labels:
     if: ${{ github.event_name == 'pull_request' }}
-    runs-on: office-ci-small
+    runs-on: ubuntu-24.04
     outputs:
       status: ${{ steps.require-labels.outputs.status }}
     steps:
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 569884f..2c2e916 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -16,21 +16,27 @@ permissions:
 jobs:
   get-version:
     name: Version
-    runs-on: office-ci-small
+    runs-on: ubuntu-24.04
     outputs:
       version: ${{ steps.get-version.outputs.version }}
     steps:
+      - uses: actions/checkout@v6
+        with:
+          fetch-depth: 0
+          persist-credentials: false
       - name: Get Release Version
         id: get-version
         uses: nullify-platform/github-actions/actions/release-version@main
       - run: |
-          echo "**Version:** ${{ steps.get-version.outputs.version }}" >> $GITHUB_STEP_SUMMARY
-          echo "**Short SHA:** $(git rev-parse --short HEAD)" >> $GITHUB_STEP_SUMMARY
+          {
+            echo "**Version:** ${{ steps.get-version.outputs.version }}"
+            echo "**Short SHA:** $(git rev-parse --short HEAD)"
+          } >> "$GITHUB_STEP_SUMMARY"
   goreleaser:
     if: ${{ needs.get-version.outputs.version != 'undefined' }}
     name: GoReleaser
     needs: [get-version]
-    runs-on: office-ci-small
+    runs-on: ubuntu-24.04
     steps:
       - uses: actions/checkout@v6
         with:
diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml
index 62249e8..6824793 100644
--- a/.github/workflows/scorecard.yml
+++ b/.github/workflows/scorecard.yml
@@ -13,7 +13,7 @@ run-name: OSSF Scorecard by @${{ github.actor }} ${{ github.sha }}
 jobs:
   analysis:
     name: Scorecard analysis
-    runs-on: office-ci-small
+    runs-on: ubuntu-24.04
     permissions:
       security-events: write
       id-token: write