consolidate go + yara-x version definitions

Signed-off-by: egibs <20933572+egibs@users.noreply.github.com>

Author: egibs

.github/workflows/codeql.yaml

@@ -12,7 +12,7 @@ on:
 
 env:
   CODEQL_EXTRACTOR_GO_BUILD_TRACING: "on"
-  YARA_X_RELEASE: "v1.13.0"
+  YARA_X_RELEASE: "1.13.0"
 
 permissions: {}
 
@@ -35,7 +35,7 @@ jobs:
         uses: actions/cache@cdf6c1fa76f9f475f3d7449005a359c84ca0f306 # v5.0.3
         with:
           path: yara-x-install
-          key: yara-x-capi-${{ env.YARA_X_RELEASE }}-${{ runner.os }}
+          key: yara-x-capi-v${{ env.YARA_X_RELEASE }}-${{ runner.os }}
       - name: Checkout virusTotal/yara-x
         if: steps.yara-x-capi.outputs.cache-hit != 'true'
         uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
@@ -44,7 +44,7 @@ jobs:
           fetch-tags: true
           repository: virusTotal/yara-x
           path: yara-x
-          ref: refs/tags/${{ env.YARA_X_RELEASE }}
+          ref: refs/tags/v${{ env.YARA_X_RELEASE }}
       - name: Install Rust for yara-x-capi
         if: steps.yara-x-capi.outputs.cache-hit != 'true'
         uses: dtolnay/rust-toolchain@e97e2d8cc328f1b50210efc529dca0028893a2d9
@@ -57,7 +57,7 @@ jobs:
           path: |
             ~/.cargo/registry/
             ~/.cargo/git/
-          key: rust-cargo-${{ env.YARA_X_RELEASE }}-${{ runner.os }}
+          key: rust-cargo-v${{ env.YARA_X_RELEASE }}-${{ runner.os }}
           restore-keys: rust-cargo-
       - name: Build yara-x-capi
         if: steps.yara-x-capi.outputs.cache-hit != 'true'

.github/workflows/fuzz.yaml

@@ -29,6 +29,10 @@ on:
           - "60m"
           - "180m"
 
+env:
+  GO_RELEASE: "go-1.26"
+  YARA_X_RELEASE: "1.13.0"
+
 permissions: {}
 
 jobs:
@@ -117,7 +121,7 @@ jobs:
       - name: Install dependencies
         run: |
           apk update
-          apk add curl findutils git gnutar go-1.26 nodejs upx xz yara-x~1.13.0
+          apk add curl findutils git gnutar ${{ env.GO_RELEASE }} nodejs upx xz yara-x~${{ env.YARA_X_RELEASE }}
 
       - name: Checkout code
         uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2

.github/workflows/go-tests.yaml

@@ -11,6 +11,10 @@ on:
     branches:
       - "main"
 
+env:
+  GO_RELEASE: "go-1.26"
+  YARA_X_RELEASE: "1.13.0"
+
 permissions: {}
 
 jobs:
@@ -37,7 +41,7 @@ jobs:
       - name: Install dependencies
         run: |
           apk update
-          apk add curl findutils git gnutar go-1.26 nodejs upx xz yara-x~1.13.0
+          apk add curl findutils git gnutar ${{ env.GO_RELEASE }} nodejs upx xz yara-x~${{ env.YARA_X_RELEASE }}
 
       - name: Checkout code
         uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
@@ -88,7 +92,7 @@ jobs:
       - name: Install dependencies
         run: |
           apk update
-          apk add curl findutils git gnutar go-1.26 nodejs upx xz yara-x~1.13.0
+          apk add curl findutils git gnutar ${{ env.GO_RELEASE }} nodejs upx xz yara-x~${{ env.YARA_X_RELEASE }}
 
       - name: Checkout code
         uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2

.github/workflows/release.yaml

@@ -6,8 +6,7 @@ name: Cut Release
 on:
   workflow_dispatch:
 
-permissions:
-  contents: read
+permissions: {}
 
 env:
   VERSION_FILE: pkg/version/version.go

.github/workflows/third-party.yaml

@@ -8,8 +8,11 @@ on:
   schedule:
     - cron: "0 */12 * * *"
 
-permissions:
-  contents: read
+env:
+  GO_RELEASE: "go-1.26"
+  YARA_X_RELEASE: "1.13.0"
+
+permissions: {}
 
 jobs:
   update:
@@ -37,7 +40,7 @@ jobs:
       - name: Install dependencies
         run: |
           apk update
-          apk add bash curl findutils gh git gnutar go-1.26 nodejs perl upx xz yara-x~1.13.0
+          apk add bash curl findutils gh git gnutar ${{ env.GO_RELEASE }} nodejs perl upx xz yara-x~${{ env.YARA_X_RELEASE }}
       - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
       - name: Trust repository
         run: git config --global --add safe.directory "${GITHUB_WORKSPACE}"