ci: fix actionlint findings

Author: gcl-sekoia

.github/actionlint.yaml

@@ -0,0 +1,3 @@
+self-hosted-runner:
+  labels:
+    - gh-ubuntu-arm64

.github/workflows/publish_docker_images.yml

@@ -78,13 +78,15 @@ jobs:
           EVENT_NAME: ${{ github.event_name }}
           REF_TYPE: ${{ github.ref_type }}
         run: |
-          echo "QW_COMMIT_DATE=$(TZ=UTC0 git log -1 --format=%cd --date=format-local:%Y-%m-%dT%H:%M:%SZ)" >> $GITHUB_ENV
-          echo "QW_COMMIT_HASH=$(git rev-parse HEAD)" >> $GITHUB_ENV
-          echo "QW_COMMIT_TAGS=$(git tag --points-at HEAD | tr '\n' ',')" >> $GITHUB_ENV
+          {
+            echo "QW_COMMIT_DATE=$(TZ=UTC0 git log -1 --format=%cd --date=format-local:%Y-%m-%dT%H:%M:%SZ)"
+            echo "QW_COMMIT_HASH=$(git rev-parse HEAD)"
+            echo "QW_COMMIT_TAGS=$(git tag --points-at HEAD | tr '\n' ',')"
+          } >> "$GITHUB_ENV"
           if [[ "$EVENT_NAME" == "push" && "$REF_TYPE" == "tag" && "${GITHUB_REF#refs/tags/}" == *"jemprof"* ]]; then
-            echo "CARGO_FEATURES=release-jemalloc-profiled" >> $GITHUB_ENV
+            echo "CARGO_FEATURES=release-jemalloc-profiled" >> "$GITHUB_ENV"
           else
-            echo "CARGO_FEATURES=release-feature-set" >> $GITHUB_ENV
+            echo "CARGO_FEATURES=release-feature-set" >> "$GITHUB_ENV"
           fi
 
       - name: Build and push image
@@ -156,10 +158,11 @@ jobs:
       - name: Create manifest list and push tags
         working-directory: /tmp/digests
         run: |
+          # shellcheck disable=SC2046
           docker buildx imagetools create $(jq -cr '.tags | map("-t " + .) | join(" ")' <<< "$DOCKER_METADATA_OUTPUT_JSON") \
             $(printf '${{ env.REGISTRY_IMAGE }}@sha256:%s ' *)
       - name: Inspect image
         run: |
-          docker buildx imagetools inspect ${{ env.REGISTRY_IMAGE }}:${STEPS_META_OUTPUTS_VERSION}
+          docker buildx imagetools inspect "${{ env.REGISTRY_IMAGE }}:${STEPS_META_OUTPUTS_VERSION}"
         env:
           STEPS_META_OUTPUTS_VERSION: ${{ steps.meta.outputs.version }}

.github/workflows/publish_release_packages.yml

@@ -21,7 +21,7 @@ jobs:
     steps:
       - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
       - name: Extract asset version
-        run: echo "ASSET_VERSION=${GITHUB_REF/refs\/tags\//}" >> $GITHUB_ENV
+        run: echo "ASSET_VERSION=${GITHUB_REF/refs\/tags\//}" >> "$GITHUB_ENV"
       - uses: ./.github/actions/cargo-build-macos-binary
         with:
           target: ${{ matrix.target }}
@@ -39,7 +39,7 @@ jobs:
     steps:
       - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
       - name: Extract asset version
-        run: echo "ASSET_VERSION=${GITHUB_REF/refs\/tags\//}" >> $GITHUB_ENV
+        run: echo "ASSET_VERSION=${GITHUB_REF/refs\/tags\//}" >> "$GITHUB_ENV"
       - uses: ./.github/actions/cross-build-binary
         with:
           target: ${{ matrix.target }}