Consolidate GitHub Actions workflows

* Moves lint jobs into a single workflow.
* Separates building from linting.
* Assigns proper names to all jobs so they're usable in GitHub branch protection rules.

Signed-off-by: nscuro <nscuro@protonmail.com>

Author: nscuro

.github/workflows/build.yml

@@ -0,0 +1,48 @@
+# This file is part of Dependency-Track.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#   http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+# SPDX-License-Identifier: Apache-2.0
+# Copyright (c) OWASP Foundation. All Rights Reserved.
+name: Build
+
+on:
+  pull_request:
+    branches:
+      - main
+
+permissions: {}
+
+jobs:
+  build:
+    name: Build
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+        with:
+          persist-credentials: false
+      - name: Install imaging dependencies
+        run: |
+          sudo apt-get update
+          sudo apt-get install -y --no-install-recommends \
+            libcairo2-dev \
+            libffi-dev \
+            libfreetype6-dev \
+            libjpeg-dev \
+            libpng-dev \
+            libz-dev
+      - uses: astral-sh/setup-uv@08807647e7069bb48b6ef5acd8ec9567f424441b # v8.1.0
+        with:
+          enable-cache: false
+      - name: Build
+        run: make build

.github/workflows/docs.yml .github/workflows/deploy.yml.github/workflows/docs.yml renamed to .github/workflows/deploy.yml

@@ -14,48 +14,19 @@
 #
 # SPDX-License-Identifier: Apache-2.0
 # Copyright (c) OWASP Foundation. All Rights Reserved.
-name: docs
+name: Deploy
 
 on:
   push:
     branches: [main]
     tags: ["[0-9]+.[0-9]+.[0-9]+", "[0-9]+.[0-9]+.[0-9]+-*"]
-  pull_request:
-    branches: [main]
 
 permissions: {}
 
 jobs:
-  lint:
-    runs-on: ubuntu-latest
-    if: github.event_name == 'pull_request'
-    steps:
-    - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
-      with:
-        persist-credentials: false
-    - name: Install imaging dependencies
-      run: |
-        sudo apt-get update
-        sudo apt-get install -y --no-install-recommends \
-          libcairo2-dev libfreetype6-dev libffi-dev \
-          libjpeg-dev libpng-dev libz-dev
-    - uses: astral-sh/setup-uv@08807647e7069bb48b6ef5acd8ec9567f424441b # v8.1.0
-      with:
-        enable-cache: false
-    - name: Lint Markdown
-      run: make lint-markdown
-    - name: Lint YAML
-      run: make lint-yaml
-    - name: Lint prose
-      run: make lint-prose
-    - name: Lint Python
-      run: make lint-python
-    - name: Build
-      run: make build
-
   deploy:
+    name: Deploy
     runs-on: ubuntu-latest
-    if: github.event_name == 'push'
     permissions:
       contents: write
     env:
@@ -76,8 +47,12 @@ jobs:
       run: |
         sudo apt-get update
         sudo apt-get install -y --no-install-recommends \
-          libcairo2-dev libfreetype6-dev libffi-dev \
-          libjpeg-dev libpng-dev libz-dev
+          libcairo2-dev \
+          libffi-dev \
+          libfreetype6-dev \
+          libjpeg-dev \
+          libpng-dev \
+          libz-dev
     - uses: astral-sh/setup-uv@08807647e7069bb48b6ef5acd8ec9567f424441b # v8.1.0
       with:
         enable-cache: false

.github/workflows/zizmor.yml .github/workflows/lint.yml.github/workflows/zizmor.yml renamed to .github/workflows/lint.yml

@@ -14,26 +14,40 @@
 #
 # SPDX-License-Identifier: Apache-2.0
 # Copyright (c) OWASP Foundation. All Rights Reserved.
-name: zizmor
+name: Lint
 
 on:
-  push:
-    branches: [main]
   pull_request:
-    branches: ["**"]
+    branches:
+      - main
 
 permissions: {}
 
 jobs:
-  zizmor:
+  lint-docs:
+    name: Lint Docs
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+        with:
+          persist-credentials: false
+      - name: Lint Markdown
+        run: make lint-markdown
+      - name: Lint prose
+        run: make lint-prose
+      - name: Lint YAML
+        run: make lint-yaml
+
+  lint-gha:
+    name: Lint GitHub Actions
     runs-on: ubuntu-latest
     permissions:
       security-events: write
       contents: read
       actions: read
     steps:
-    - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
-      with:
-        persist-credentials: false
-    - name: Run zizmor
-      uses: zizmorcore/zizmor-action@5f14fd08f7cf1cb1609c1e344975f152c7ee938d # v0.5.6
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+        with:
+          persist-credentials: false
+      - name: Run zizmor
+        uses: zizmorcore/zizmor-action@5f14fd08f7cf1cb1609c1e344975f152c7ee938d # v0.5.6