Repository navigation
chore(ci): remove unused composite actions, clear shellcheck debt and pin example workflows #3478
Description
Problem
Loose ends in GitHub Actions left after #3477:
- Unused composite actions:
.github/actions/aggregate-testsand.github/actions/validate-checkare referenced by no active workflow. - Shellcheck debt: CI lints at
--severity=error, so 43 info/style findings pass: SC2086 unquoted$GITHUB_OUTPUTand variables (36), SC2129 (5), SC2012 (1) and SC2162 (1). They are spread across branch-name-validation, changelog-unified, documentation, pr-template-routing and the metrics aggregator. - Examples pinned to tags:
.github/examples/workflow-consumption-wordpress-{plugin,theme}.ymluse@vNtags. Consumers copy these files, so they should show full-SHA pins like the live workflows.
Change
- Delete the two unused composite actions, or wire them in if a planned workflow needs them. Check [Epic] Workflow Consolidation Initiative 2026-Q4 #2896 first.
- Fix the findings, then raise
SHELLCHECK_OPTSin workflow-lint.yml to--severity=styleso they cannot return. - Pin the example workflows to SHAs with version comments.
Acceptance
- actionlint with default shellcheck severity reports 0 findings on active workflows.
- Semgrep
p/github-actionsreports 0github-actions-mutable-action-tagfindings outside.github/workflows/archived/.
Activity
linear-code commentedon Sep 23, 2026
LS-4241
fix(ci): fail artifact pruning on errors and order by filename (#3478)
docs(examples): make the scaffold CI examples runnable on a clean repo (
chore: ci - clear workflow shellcheck debt and fix consumption exampl…
feat: ci - activate organisation reusable workflows (#3486)
eleshar commentedon Sep 25, 2026
Post-close note from a GitHub Actions audit of
origin/develop(43d468623b): the shellcheck and example-pinning parts of this issue are done, but one item in the Change list is not.This issue asked:
#3483closed this issue but only fixed shellcheck debt and the consumption examples. Both composites are still ondevelop:.github/actions/aggregate-tests/action.yml— 0 callers.github/actions/validate-check/action.yml— 0 callerscollect-metricsandapply-labelsare used bylabeling-unified.ymland are unaffected.Reopened in scope as #3570, together with the related inert workflow test harness in
.github/tests/. Closing this as completed without either action is what let the dead code survive.fix: ci - remove inert workflow harness and uncalled composite actions (
fix: ci - run Jest on every PR and fail only on new failures (#3487)