CI/CD workflow hardening and API-shipping log clarity

.github/actions/artifacts-attest/action.yml

@@ -4,10 +4,9 @@ description: 'Artifacts attestation'
 runs:
   using: 'composite'
   steps:
-  -
-    name: 'Attestation'
-    uses: actions/[email protected]
-    with:
-      subject-path: |
-        ${{ github.workspace }}/artifacts/packages/native
-        ${{ github.workspace }}/artifacts/packages/nuget
+    - name: 'Attestation'
+      uses: actions/[email protected]
+      with:
+        subject-path: |
+          ${{ github.workspace }}/artifacts/packages/native
+          ${{ github.workspace }}/artifacts/packages/nuget

.github/actions/artifacts-restore/action.yml

@@ -4,27 +4,26 @@ description: 'Artifacts restore'
 runs:
   using: 'composite'
   steps:
-  -
-    uses: actions/download-artifact@v4
-    name: Download native linux packages
-    with:
-      name: native-Linux
-      path: ${{ github.workspace }}/artifacts/packages/native
-  -
-    uses: actions/download-artifact@v4
-    name: Download native windows packages
-    with:
-      name: native-Windows
-      path: ${{ github.workspace }}/artifacts/packages/native
-  -
-    uses: actions/download-artifact@v4
-    name: Download native macos packages
-    with:
-      name: native-macOS
-      path: ${{ github.workspace }}/artifacts/packages/native
-  -
-    uses: actions/download-artifact@v4
-    name: Download nuget packages
-    with:
-      name: nuget
-      path: ${{ github.workspace }}/artifacts/packages/nuget
+    - uses: actions/download-artifact@v8
+      name: Download native linux packages
+      with:
+        name: native-Linux
+        path: ${{ github.workspace }}/artifacts/packages/native
+
+    - uses: actions/download-artifact@v8
+      name: Download native windows packages
+      with:
+        name: native-Windows
+        path: ${{ github.workspace }}/artifacts/packages/native
+
+    - uses: actions/download-artifact@v8
+      name: Download native macos packages
+      with:
+        name: native-macOS
+        path: ${{ github.workspace }}/artifacts/packages/native
+
+    - uses: actions/download-artifact@v8
+      name: Download nuget packages
+      with:
+        name: nuget
+        path: ${{ github.workspace }}/artifacts/packages/nuget

.github/actions/cache-restore/action.yml

@@ -4,22 +4,21 @@ description: 'Cache restore'
 runs:
   using: 'composite'
   steps:
-  -
-    name: Use cached cake frosting
-    id: cache-cake
-    uses: actions/cache@v5
-    with:
-      path: run
-      key: run-${{ runner.os }}-${{ hashFiles('./build/**') }}
-  -
-    name: Use cached tools
-    id: cache-tools
-    uses: actions/cache@v5
-    with:
-      path: tools
-      key: tools-${{ runner.os }}-${{ hashFiles('./build/**') }}
-  -
-    name: Setup .NET SDK
-    uses: actions/setup-dotnet@v5
-    with:
-      global-json-file: global.json
+    - name: Use cached cake frosting
+      id: cache-cake
+      uses: actions/cache@v5
+      with:
+        path: run
+        key: run-${{ runner.os }}-${{ hashFiles('./build/**') }}
+
+    - name: Use cached tools
+      id: cache-tools
+      uses: actions/cache@v5
+      with:
+        path: tools
+        key: tools-${{ runner.os }}-${{ hashFiles('./build/**') }}
+
+    - name: Setup .NET SDK
+      uses: actions/setup-dotnet@v5
+      with:
+        global-json-file: global.json

.github/actions/docker-manifests/action.yml

@@ -23,30 +23,29 @@ inputs:
 runs:
   using: 'composite'
   steps:
-  -
-    name: Login to DockerHub
-    uses: docker/login-action@v4
-    with:
-      username: ${{ inputs.docker_registry_username }}
-      password: ${{ inputs.docker_registry_password }}
-  -
-    name: '[Docker Publish Manifests] DockerHub'
-    shell: pwsh
-    run: |
+    - name: Login to DockerHub
+      uses: docker/login-action@v4
+      with:
+        username: ${{ inputs.docker_registry_username }}
+        password: ${{ inputs.docker_registry_password }}
+
+    - name: '[Docker Publish Manifests] DockerHub'
+      shell: pwsh
+      run: |
         dotnet run/docker.dll `
               --target=DockerManifest --arch=amd64 --arch=arm64 --dotnet_version=${{ inputs.dotnet_version }} `
               --docker_distro=${{ inputs.docker_distro }} --docker_registry dockerhub
-  -
-    name: Login to GitHub
-    uses: docker/login-action@v4
-    with:
-      registry: ghcr.io
-      username: ${{ inputs.github_registry_username }}
-      password: ${{ inputs.github_registry_password }}
-  -
-    name: '[Docker Publish Manifests] GitHub'
-    shell: pwsh
-    run: |
+
+    - name: Login to GitHub
+      uses: docker/login-action@v4
+      with:
+        registry: ghcr.io
+        username: ${{ inputs.github_registry_username }}
+        password: ${{ inputs.github_registry_password }}
+
+    - name: '[Docker Publish Manifests] GitHub'
+      shell: pwsh
+      run: |
         dotnet run/docker.dll `
               --target=DockerManifest --arch=amd64 --arch=arm64 --dotnet_version=${{ inputs.dotnet_version }} `
               --docker_distro=${{ inputs.docker_distro }} --docker_registry github

.github/actions/docker-publish/action.yml

@@ -26,30 +26,29 @@ inputs:
 runs:
   using: 'composite'
   steps:
-  -
-    name: Login to DockerHub
-    uses: docker/login-action@v4
-    with:
-      username: ${{ inputs.docker_registry_username }}
-      password: ${{ inputs.docker_registry_password }}
-  -
-    name: '[Docker Publish] DockerHub'
-    shell: pwsh
-    run: |
+    - name: Login to DockerHub
+      uses: docker/login-action@v4
+      with:
+        username: ${{ inputs.docker_registry_username }}
+        password: ${{ inputs.docker_registry_password }}
+
+    - name: '[Docker Publish] DockerHub'
+      shell: pwsh
+      run: |
         dotnet run/docker.dll `
               --target=DockerPublish --arch=${{ inputs.arch }} --dotnet_version=${{ inputs.dotnet_version }} `
               --docker_distro=${{ inputs.docker_distro }} --docker_registry dockerhub --verbosity=diagnostic
-  -
-    name: Login to GitHub
-    uses: docker/login-action@v4
-    with:
-      registry: ghcr.io
-      username: ${{ inputs.github_registry_username }}
-      password: ${{ inputs.github_registry_password }}
-  -
-    name: '[Docker Publish] GitHub'
-    shell: pwsh
-    run: |
+
+    - name: Login to GitHub
+      uses: docker/login-action@v4
+      with:
+        registry: ghcr.io
+        username: ${{ inputs.github_registry_username }}
+        password: ${{ inputs.github_registry_password }}
+
+    - name: '[Docker Publish] GitHub'
+      shell: pwsh
+      run: |
         dotnet run/docker.dll `
               --target=DockerPublish --arch=${{ inputs.arch }} --dotnet_version=${{ inputs.dotnet_version }} `
               --docker_distro=${{ inputs.docker_distro }} --docker_registry github --verbosity=diagnostic

.github/actions/docker-setup/action.yml

@@ -2,9 +2,9 @@ name: 'Docker Setup'
 description: 'Setups the docker engine'
 
 runs:
-    using: 'composite'
-    steps:
-        -   name: Set up Docker
-            uses: docker/setup-docker-action@v5
-            with:
-                daemon-config: '{ "features": { "containerd-snapshotter": true } }'
+  using: 'composite'
+  steps:
+    - name: Set up Docker
+      uses: docker/setup-docker-action@v5
+      with:
+        daemon-config: '{ "features": { "containerd-snapshotter": true } }'

.github/actions/docker-test/action.yml

@@ -14,27 +14,26 @@ inputs:
 runs:
   using: 'composite'
   steps:
-  -
-    name: '[Docker Build & Test] DockerHub'
-    uses: nick-fields/retry@v3
-    with:
-      shell: pwsh
-      timeout_minutes: 30
-      max_attempts: 3
-      retry_on: error
-      command: |
-        dotnet run/docker.dll --target=DockerTest `
-              --arch=${{ inputs.arch }} --dotnet_version=${{ inputs.dotnet_version }} `
-              --docker_distro=${{ inputs.docker_distro }} --docker_registry dockerhub --verbosity=diagnostic
-  -
-    name: '[Docker Build & Test] GitHub'
-    uses: nick-fields/retry@v3
-    with:
-      shell: pwsh
-      timeout_minutes: 30
-      max_attempts: 3
-      retry_on: error
-      command: |
-        dotnet run/docker.dll --target=DockerTest `
-              --arch=${{ inputs.arch }} --dotnet_version=${{ inputs.dotnet_version }} `
-              --docker_distro=${{ inputs.docker_distro }} --docker_registry github --verbosity=diagnostic
+    - name: '[Docker Build & Test] DockerHub'
+      uses: nick-fields/retry@v3
+      with:
+        shell: pwsh
+        timeout_minutes: 30
+        max_attempts: 3
+        retry_on: error
+        command: |
+          dotnet run/docker.dll --target=DockerTest `
+                --arch=${{ inputs.arch }} --dotnet_version=${{ inputs.dotnet_version }} `
+                --docker_distro=${{ inputs.docker_distro }} --docker_registry dockerhub --verbosity=diagnostic
+
+    - name: '[Docker Build & Test] GitHub'
+      uses: nick-fields/retry@v3
+      with:
+        shell: pwsh
+        timeout_minutes: 30
+        max_attempts: 3
+        retry_on: error
+        command: |
+          dotnet run/docker.dll --target=DockerTest `
+                --arch=${{ inputs.arch }} --dotnet_version=${{ inputs.dotnet_version }} `
+                --docker_distro=${{ inputs.docker_distro }} --docker_registry github --verbosity=diagnostic

.github/workflows/_artifacts_linux.yml

@@ -28,39 +28,38 @@ jobs:
         docker_distro: ${{ fromJson(inputs.docker_distros) }}
         dotnet_version: ${{ fromJson(inputs.dotnet_versions) }}
     steps:
-    -
-      name: Checkout
-      uses: actions/checkout@v6
-      with:
-        fetch-depth: 0
-    -
-      name: Restore State
-      uses: ./.github/actions/cache-restore
-    -
-      uses: actions/download-artifact@v8
-      name: Download nuget packages
-      with:
-        name: nuget
-        path: ${{ github.workspace }}/artifacts/packages/nuget
-    -
-      uses: actions/download-artifact@v8
-      name: Download native packages
-      with:
-        name: native-Linux
-        path: ${{ github.workspace }}/artifacts/packages/native
-    -
-      name: Set up Docker
-      uses: ./.github/actions/docker-setup
-    -
-      name: '[Test Artifacts]'
-      uses: nick-fields/retry@v3
-      with:
-        shell: pwsh
-        timeout_minutes: 30
-        max_attempts: 3
-        retry_on: error
-        command: |
-          dotnet run/artifacts.dll `
-                --target=ArtifactsTest --arch=${{ inputs.arch }} `
-                --dotnet_version=${{ matrix.dotnet_version }} `
-                --docker_distro=${{ matrix.docker_distro }}
+      - name: Checkout
+        uses: actions/checkout@v6
+        with:
+          fetch-depth: 0
+
+      - name: Restore State
+        uses: ./.github/actions/cache-restore
+
+      - uses: actions/download-artifact@v8
+        name: Download nuget packages
+        with:
+          name: nuget
+          path: ${{ github.workspace }}/artifacts/packages/nuget
+
+      - uses: actions/download-artifact@v8
+        name: Download native packages
+        with:
+          name: native-Linux
+          path: ${{ github.workspace }}/artifacts/packages/native
+
+      - name: Set up Docker
+        uses: ./.github/actions/docker-setup
+
+      - name: '[Test Artifacts]'
+        uses: nick-fields/retry@v3
+        with:
+          shell: pwsh
+          timeout_minutes: 30
+          max_attempts: 3
+          retry_on: error
+          command: |
+            dotnet run/artifacts.dll `
+                  --target=ArtifactsTest --arch=${{ inputs.arch }} `
+                  --dotnet_version=${{ matrix.dotnet_version }} `
+                  --docker_distro=${{ matrix.docker_distro }}

.github/workflows/_artifacts_windows.yml

@@ -15,21 +15,20 @@ jobs:
         package: [ Executable, MsBuildFull ]
 
     steps:
-    -
-      name: Checkout
-      uses: actions/checkout@v6
-      with:
-        fetch-depth: 0
-    -
-      name: Restore State
-      uses: ./.github/actions/cache-restore
-    -
-      uses: actions/download-artifact@v8
-      name: Download nuget packages
-      with:
-        name: nuget
-        path: ${{ github.workspace }}/artifacts/packages/nuget
-    -
-      name: '[Test Artifacts]'
-      shell: pwsh
-      run: dotnet run/artifacts.dll --target=Artifacts${{ matrix.package }}Test
+      - name: Checkout
+        uses: actions/checkout@v6
+        with:
+          fetch-depth: 0
+
+      - name: Restore State
+        uses: ./.github/actions/cache-restore
+
+      - uses: actions/download-artifact@v8
+        name: Download nuget packages
+        with:
+          name: nuget
+          path: ${{ github.workspace }}/artifacts/packages/nuget
+
+      - name: '[Test Artifacts]'
+        shell: pwsh
+        run: dotnet run/artifacts.dll --target=Artifacts${{ matrix.package }}Test