ci: run lightweight PR checks on self-hosted runners#4116
Conversation
Switch the non-Docker, PR-triggered helper/check workflows to self-hosted runners as an initial easy-win test of the new Altinn self-hosted runner infrastructure: - check-for-changes - get-current-version - generate-git-short-sha Requires the dialogporten runners to be provisioned first via Altinn/altinn-platform (infrastructure/gh-runners/dialogporten.tf). Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
|
No actionable comments were generated in the recent review. 🎉 ℹ️ Recent review info⚙️ Run configurationConfiguration used: Path: .coderabbit.yaml Review profile: CHILL Plan: Pro Run ID: 📒 Files selected for processing (4)
📝 WalkthroughWalkthroughFour GitHub Actions workflow jobs — ChangesRunner Migration
Estimated code review effort🎯 1 (Trivial) | ⏱️ ~2 minutes 🚥 Pre-merge checks | ✅ 5✅ Passed checks (5 passed)
✏️ Tip: You can configure your own custom pre-merge checks in the settings. ✨ Finishing Touches🧪 Generate unit tests (beta)
Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out. Comment |
Adds the PR title checker to the set of lightweight, non-Docker PR checks moved to self-hosted runners. It does not check out PR/fork code, so the pull_request_target trigger does not expose fork-code execution risk. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
|



Description
Initial easy-win test of the new Altinn self-hosted runner infrastructure. Switches three lightweight, non-Docker, PR-triggered workflows from
ubuntu-latesttoself-hosted:workflow-check-for-changes.yml(checkout +step-security/changed-files)workflow-get-current-version.yml(checkout +cat version.txt)workflow-generate-git-short-sha.yml(checkout +git rev-parse)All three run on every PR via
ci-cd-pull-request.yml, so this is easy to observe.Depends on Altinn/altinn-platform#3707, which provisions the dialogporten runners. That PR must merge and deploy first, and a runner must show up under repo Settings → Actions → Runners — otherwise these jobs queue with no runner to pick them up. Mark ready for review once a runner is online.
Notes
ci-cd-pull-request-title.ymlonubuntu-lateston purpose — it usespull_request_target(fork-job risk), not a good place to start.check-for-changes: it usesstep-security/harden-runner(audit mode), which has limited self-hosted support. If it misbehaves, the two trivial helpers are the cleanest signal that self-hosted works.Verification
🤖 Generated with Claude Code