Use INTERNAL_ACTIONS_REF

Author: alexiri

.github/workflows/build-image.yml

@@ -114,6 +114,7 @@ env:
   IMAGE_REGISTRY: ${{ inputs.REGISTRY }}
   IMAGE_PATH: ${{ inputs.image-path }}
   SIGNING_ENABLED: ${{ (secrets.SIGNING_SECRET != null && secrets.SIGNING_SECRET != '') || inputs.KMS_KEY_ALIAS != '' }}
+  INTERNAL_ACTIONS_REF: sbom
 
 concurrency:
   group: ${{ github.workflow }}-${{ github.ref || github.run_id }}-${{ inputs.image-name }}
@@ -130,24 +131,11 @@ jobs:
       - name: Checkout
         uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v4
 
-      - name: Determine actions ref
-        id: actions_ref
-        shell: bash
-        run: |
-          echo "${{ github.workflow_ref }}, ${{ github.action_ref }}"
-          WF_REF='${{ github.workflow_ref }}'
-          REF="${WF_REF##*@}"
-          # Fallback to main if empty (should not normally happen)
-          if [ -z "$REF" ]; then
-            REF='main'
-          fi
-          echo "ref=$REF" >> "$GITHUB_OUTPUT"
-
       - name: Checkout github actions
         uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v4
         with:
           repository: AlmaLinux/atomic-ci
-          ref: ${{ steps.actions_ref.outputs.ref }}
+          ref: ${{ env.INTERNAL_ACTIONS_REF }}
           path: github-actions
 
       - uses: ./github-actions/.github/actions/prepare-build
@@ -184,27 +172,11 @@ jobs:
         with:
           fetch-depth: 0 # Fetch all history for changelog generation
 
-      - name: Determine actions ref
-        id: actions_ref
-        shell: bash
-        env:
-          GITHUB: ${{ toJSON(github) }}
-        run: |
-          echo "${{ github.workflow_ref }}, ${{ github.action_ref }}"
-          echo ${GITHUB}
-          WF_REF='${{ github.workflow_ref }}'
-          REF="${WF_REF##*@}"
-          # Fallback to main if empty (should not normally happen)
-          if [ -z "$REF" ]; then
-            REF='main'
-          fi
-          echo "ref=$REF" >> "$GITHUB_OUTPUT"
-
       - name: Checkout github actions
         uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v4
         with:
           repository: AlmaLinux/atomic-ci
-          ref: ${{ steps.actions_ref.outputs.ref }}
+          ref: ${{ env.INTERNAL_ACTIONS_REF }}
           path: github-actions
 
       - uses: ./github-actions/.github/actions/build
@@ -263,23 +235,11 @@ jobs:
       major-version: ${{ steps.push_manifest.outputs.major-version }}
       signing-enabled: ${{ env.SIGNING_ENABLED }}
     steps:
-      - name: Determine actions ref
-        id: actions_ref
-        shell: bash
-        run: |
-          WF_REF='${{ github.workflow_ref }}'
-          REF="${WF_REF##*@}"
-          # Fallback to main if empty (should not normally happen)
-          if [ -z "$REF" ]; then
-            REF='main'
-          fi
-          echo "ref=$REF" >> "$GITHUB_OUTPUT"
-
       - name: Checkout github actions
         uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v4
         with:
           repository: AlmaLinux/atomic-ci
-          ref: ${{ steps.actions_ref.outputs.ref }}
+          ref: ${{ env.INTERNAL_ACTIONS_REF }}
           path: github-actions
 
       - uses: ./github-actions/.github/actions/manifest

.github/workflows/build-iso.yml

@@ -87,6 +87,9 @@ on:
         description: "The AWS role ARN to assume for AWS S3 uploads"
         required: false
 
+env:
+  INTERNAL_ACTIONS_REF: sbom
+
 jobs:
   generate_matrix:
     runs-on: ubuntu-latest
@@ -121,23 +124,11 @@ jobs:
       - name: Checkout
         uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v4
 
-      - name: Determine actions ref
-        id: actions_ref
-        shell: bash
-        run: |
-          WF_REF='${{ github.workflow_ref }}'
-          REF="${WF_REF##*@}"
-          # Fallback to main if empty (should not normally happen)
-          if [ -z "$REF" ]; then
-            REF='main'
-          fi
-          echo "ref=$REF" >> "$GITHUB_OUTPUT"
-
       - name: Checkout github actions
         uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v4
         with:
           repository: AlmaLinux/atomic-ci
-          ref: ${{ steps.actions_ref.outputs.ref }}
+          ref: ${{ env.INTERNAL_ACTIONS_REF }}
           path: github-actions
 
       - name: Build ISO