From 64f0f621446af7e420a4755243955ec33f8c8590 Mon Sep 17 00:00:00 2001
From: Alexander Lanin <Alexander.Lanin@etas.com>
Date: Mon, 15 Jun 2026 14:57:28 +0200
Subject: [PATCH 1/3] chore: use setup-bazel-cache action

---
 .github/workflows/bzlmod-lock-check.yml |  20 +---
 .github/workflows/copyright.yml         |   7 +-
 .github/workflows/cpp-coverage.yml      |   7 +-
 .github/workflows/docs-verify.yml       |  51 +--------
 .github/workflows/docs.yml              | 138 +-----------------------
 .github/workflows/format.yml            |   7 +-
 .github/workflows/license-check.yml     |   7 +-
 .github/workflows/on-pr.yml             |  21 ++--
 .github/workflows/qnx-build.yml         |   7 +-
 .github/workflows/rust-coverage.yml     |   7 +-
 .github/workflows/static-analysis.yml   |   7 +-
 .github/workflows/tests.yml             |   7 +-
 README.md                               |  29 -----
 13 files changed, 32 insertions(+), 283 deletions(-)

diff --git a/.github/workflows/bzlmod-lock-check.yml b/.github/workflows/bzlmod-lock-check.yml
index b46f350..f6e484f 100644
--- a/.github/workflows/bzlmod-lock-check.yml
+++ b/.github/workflows/bzlmod-lock-check.yml
@@ -66,18 +66,9 @@ jobs:
         uses: actions/checkout@v4.2.2
 
       - name: Setup Bazel with shared caching
-        uses: bazel-contrib/setup-bazel@0.18.0
+        uses: eclipse-score/cicd-actions/setup-bazel-cache@setup-bazel-cache/v0.0.0
         with:
-          disk-cache: false
-          repository-cache: false
-          bazelisk-cache: true
-          cache-save: ${{ github.event_name == 'push' }}
-
-      - name: Check MODULE.bazel formatting
-        working-directory: ${{ inputs.working-directory }}
-        run: |
-          bazel mod tidy
-          git diff --exit-code
+          unique-cache-name: ${{ github.workflow }}-${{ github.job }}
 
   bzlmod-lockfile-check:
     runs-on: ${{ vars.runner_labels_ghub_standard_x64 && fromJSON(vars.runner_labels_ghub_standard_x64) || vars.REPO_RUNNER_LABELS && fromJSON(vars.REPO_RUNNER_LABELS) || 'ubuntu-latest' }}
@@ -95,12 +86,9 @@ jobs:
         uses: actions/checkout@v4.2.2
 
       - name: Setup Bazel with shared caching
-        uses: bazel-contrib/setup-bazel@0.18.0
+        uses: eclipse-score/cicd-actions/setup-bazel-cache@setup-bazel-cache/v0.0.0
         with:
-          disk-cache: false
-          repository-cache: false
-          bazelisk-cache: true
-          cache-save: ${{ github.event_name == 'push' }}
+          unique-cache-name: ${{ github.workflow }}-${{ github.job }}
 
       - name: Verify MODULE.bazel and MODULE.bazel.lock exist
         working-directory: ${{ inputs.working-directory }}
diff --git a/.github/workflows/copyright.yml b/.github/workflows/copyright.yml
index 69a0750..ac91887 100644
--- a/.github/workflows/copyright.yml
+++ b/.github/workflows/copyright.yml
@@ -30,12 +30,9 @@ jobs:
         uses: actions/checkout@v4.2.2
 
       - name: Setup Bazel with shared caching
-        uses: bazel-contrib/setup-bazel@0.18.0
+        uses: eclipse-score/cicd-actions/setup-bazel-cache@setup-bazel-cache/v0.0.0
         with:
-          disk-cache: false
-          repository-cache: false
-          bazelisk-cache: true
-          cache-save: ${{ github.event_name == 'push' }}
+          unique-cache-name: ${{ github.workflow }}-${{ github.job }}
 
       - name: Run Copyright Check
         run: |
diff --git a/.github/workflows/cpp-coverage.yml b/.github/workflows/cpp-coverage.yml
index c5e9ad3..56f3cb8 100644
--- a/.github/workflows/cpp-coverage.yml
+++ b/.github/workflows/cpp-coverage.yml
@@ -74,12 +74,9 @@ jobs:
         uses: actions/checkout@v6
 
       - name: Setup Bazel with shared caching
-        uses: bazel-contrib/setup-bazel@0.18.0
+        uses: eclipse-score/cicd-actions/setup-bazel-cache@setup-bazel-cache/v0.0.0
         with:
-          disk-cache: ${{ github.workflow }}
-          repository-cache: true
-          bazelisk-cache: true
-          cache-save: ${{ github.event_name == 'push' && github.ref == 'refs/heads/main' }}
+          unique-cache-name: ${{ github.workflow }}-${{ github.job }}
 
       - name: Install lcov (+ bc for threshold check)
         run: |
diff --git a/.github/workflows/docs-verify.yml b/.github/workflows/docs-verify.yml
index b08ee88..177ca29 100644
--- a/.github/workflows/docs-verify.yml
+++ b/.github/workflows/docs-verify.yml
@@ -48,51 +48,10 @@ jobs:
           ref: ${{ github.head_ref || github.event.pull_request.head.ref || github.ref }}
           repository: ${{ github.event.pull_request.head.repo.full_name || github.repository }}
 
-      - name: Compute cache paths (Linux)
-        id: paths
-        shell: bash
-        run: |
-          BASE="/home/runner/.cache"
-          echo "bazelisk_home=${BASE}/bazelisk" >> "$GITHUB_OUTPUT"
-          echo "output_base=${BASE}/bazel/output_base" >> "$GITHUB_OUTPUT"
-          echo "repo_contents=${BASE}/bazel/repo_contents" >> "$GITHUB_OUTPUT"
-          echo "repo_cache=${BASE}/bazel/repo" >> "$GITHUB_OUTPUT"
-          echo "disk_cache=${BASE}/bazel/disk" >> "$GITHUB_OUTPUT"
-          echo "pip_cache=${BASE}/pip" >> "$GITHUB_OUTPUT"
-
       - name: Setup Bazel
-        uses: bazel-contrib/setup-bazel@0.18.0
-        with:
-          disk-cache: false
-          repository-cache: false
-          bazelisk-cache: true
-          cache-save: ${{ github.event_name == 'push' }}
-
-      - name: Prepare cache dirs
-        shell: bash
-        run: |
-          mkdir -p \
-            "${{ steps.paths.outputs.bazelisk_home }}" \
-            "${{ steps.paths.outputs.output_base }}" \
-            "${{ steps.paths.outputs.repo_contents }}" \
-            "${{ steps.paths.outputs.repo_cache }}" \
-            "${{ steps.paths.outputs.disk_cache }}" \
-            "${{ steps.paths.outputs.pip_cache }}"
-
-      - name: Restore content cache
-        id: restore-content
-        uses: actions/cache/restore@v4
+        uses: eclipse-score/cicd-actions/setup-bazel-cache@setup-bazel-cache/v0.0.0
         with:
-          path: |
-            ${{ steps.paths.outputs.bazelisk_home }}
-            ${{ steps.paths.outputs.output_base }}
-            ${{ steps.paths.outputs.repo_contents }}
-            ${{ steps.paths.outputs.repo_cache }}
-            ${{ steps.paths.outputs.disk_cache }}
-            ${{ steps.paths.outputs.pip_cache }}
-          key: ${{ env.CACHE_KEY_PREFIX }}-bazel-${{ runner.os }}-${{ hashFiles('MODULE.bazel', 'MODULE.bazel.lock', 'WORKSPACE*', '.bazelrc*') }}
-          restore-keys: |
-            ${{ env.CACHE_KEY_PREFIX }}-bazel-${{ runner.os }}-
+          unique-cache-name: ${{ github.workflow }}-${{ github.job }}
 
       - name: Install Graphviz
         uses: eclipse-score/apt-install@main
@@ -103,8 +62,4 @@ jobs:
       - name: Run docs verification
         id: verify
         run: |
-          bazel --output_base="${{ steps.paths.outputs.output_base }}" run \
-            --repo_contents_cache="${{ steps.paths.outputs.repo_contents }}" \
-            --repository_cache="${{ steps.paths.outputs.repo_cache }}" \
-            --disk_cache="${{ steps.paths.outputs.disk_cache }}" \
-            ${{ inputs.bazel-docs-verify-target }}
+          bazel ${{ inputs.bazel-docs-verify-target }}
diff --git a/.github/workflows/docs.yml b/.github/workflows/docs.yml
index 493f372..6d86960 100644
--- a/.github/workflows/docs.yml
+++ b/.github/workflows/docs.yml
@@ -98,124 +98,10 @@ jobs:
           # Reuse the token from inter-repo-access action to ensure access to private repos
           persist-credentials: false
 
-      - name: Compute cache paths (Linux)
-        id: paths
-        shell: bash
-        run: |
-          BASE="/home/runner/.cache"
-          echo "bazelisk_home=${BASE}/bazelisk" >> "$GITHUB_OUTPUT"
-          echo "output_base=${BASE}/bazel/output_base" >> "$GITHUB_OUTPUT"
-          echo "repo_contents=${BASE}/bazel/repo_contents" >> "$GITHUB_OUTPUT"
-          echo "repo_cache=${BASE}/bazel/repo" >> "$GITHUB_OUTPUT"
-          echo "disk_cache=${BASE}/bazel/disk" >> "$GITHUB_OUTPUT"
-          echo "pip_cache=${BASE}/pip" >> "$GITHUB_OUTPUT"
-
       - name: Setup Bazel
-        uses: bazel-contrib/setup-bazel@c5acdfb288317d0b5c0bbd7a396a3dc868bb0f86 # 0.19.0
-        with:
-          disk-cache: false
-          repository-cache: false
-          bazelisk-cache: true
-          cache-save: ${{ github.event_name == 'push' }}
-
-      - name: Prepare cache dirs
-        shell: bash
-        run: |
-          mkdir -p \
-            "${{ steps.paths.outputs.bazelisk_home }}" \
-            "${{ steps.paths.outputs.output_base }}" \
-            "${{ steps.paths.outputs.repo_contents }}" \
-            "${{ steps.paths.outputs.repo_cache }}" \
-            "${{ steps.paths.outputs.disk_cache }}" \
-            "${{ steps.paths.outputs.pip_cache }}"
-
-      - name: Restore content cache
-        uses: actions/cache/restore@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5
-        with:
-          path: |
-            ${{ steps.paths.outputs.bazelisk_home }}
-            ${{ steps.paths.outputs.output_base }}
-            ${{ steps.paths.outputs.repo_contents }}
-            ${{ steps.paths.outputs.repo_cache }}
-            ${{ steps.paths.outputs.disk_cache }}
-            ${{ steps.paths.outputs.pip_cache }}
-          key: ${{ env.CACHE_KEY_PREFIX }}-bazel-${{ runner.os }}-${{ hashFiles('MODULE.bazel', 'MODULE.bazel.lock', 'WORKSPACE*', '.bazelrc*') }}
-          restore-keys: |
-            ${{ env.CACHE_KEY_PREFIX }}-bazel-${{ runner.os }}-
-
-      - name: List cache contents after restore - bazelisk_home
-        shell: bash
-        if: runner.debug
-        run: tree -nf -L 3 "${{ steps.paths.outputs.bazelisk_home }}" || true
-
-      - name: List cache contents after restore - output_base
-        shell: bash
-        if: runner.debug
-        run: tree -nf -L 3 "${{ steps.paths.outputs.output_base }}" || true
-
-      - name: List cache contents after restore - repo_contents
-        shell: bash
-        if: runner.debug
-        run: tree -nf -L 3 "${{ steps.paths.outputs.repo_contents }}" || true
-
-      - name: List cache contents after restore - repo_cache
-        shell: bash
-        if: runner.debug
-        run: tree -nf -L 3 "${{ steps.paths.outputs.repo_cache }}" || true
-
-      - name: List cache contents after restore - disk_cache
-        shell: bash
-        if: runner.debug
-        run: tree -nf -L 3 "${{ steps.paths.outputs.disk_cache }}" || true
-
-      - name: List cache contents after restore - pip_cache
-        shell: bash
-        if: runner.debug
-        run: tree -nf -L 3 "${{ steps.paths.outputs.pip_cache }}" || true
-
-      - name: Create cache snapshot (tgz)
-        if: runner.debug
-        continue-on-error: true
-        shell: bash
-        run: |
-          set -uxo pipefail
-
-          ARCHIVE_PATH="$RUNNER_TEMP/cache-snapshot.tgz"
-          entries=()
-          for p in \
-            "${{ steps.paths.outputs.bazelisk_home }}" \
-            "${{ steps.paths.outputs.output_base }}" \
-            "${{ steps.paths.outputs.repo_contents }}" \
-            "${{ steps.paths.outputs.repo_cache }}" \
-            "${{ steps.paths.outputs.disk_cache }}" \
-            "${{ steps.paths.outputs.pip_cache }}"; do
-            if [ -e "$p" ]; then
-              entries+=("${p#/}")
-            else
-              echo "Path does not exist (skipping): $p"
-            fi
-          done
-
-          if [ "${#entries[@]}" -eq 0 ]; then
-            echo "No cache paths found to archive; skipping snapshot creation."
-            exit 0
-          fi
-
-          if ! tar -C / -czf "$ARCHIVE_PATH" "${entries[@]}"; then
-            echo "Cache snapshot creation failed; removing incomplete archive."
-            rm -f "$ARCHIVE_PATH"
-            exit 1
-          fi
-
-      - name: Upload cache snapshot artifact
-        if: runner.debug
-        continue-on-error: true
-        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+        uses: eclipse-score/cicd-actions/setup-bazel-cache@setup-bazel-cache/v0.0.0
         with:
-          name: cache-snapshot-${{ github.run_id }}-${{ github.run_attempt }}
-          path: ${{ runner.temp }}/cache-snapshot.tgz
-          retention-days: 5
-          if-no-files-found: ignore
+          unique-cache-name: ${{ github.workflow }}-${{ github.job }}
 
       - name: Install Graphviz
         uses: eclipse-score/apt-install@bd30e2e74a4850389719cb8c3e312bb26aada4e0 # v1.0.0
@@ -241,11 +127,7 @@ jobs:
 
       - name: Build documentation
         run: |
-          bazel --output_base="${{ steps.paths.outputs.output_base }}" run \
-            --repo_contents_cache="${{ steps.paths.outputs.repo_contents }}" \
-            --repository_cache="${{ steps.paths.outputs.repo_cache }}" \
-            --disk_cache="${{ steps.paths.outputs.disk_cache }}" \
-              ${{ inputs.bazel-target }}
+          bazel ${{ inputs.bazel-target }}
 
           tar -cf github-pages.tar _build
 
@@ -257,20 +139,6 @@ jobs:
           retention-days: ${{ inputs.retention-days }}
           if-no-files-found: error
 
-      - name: Save content cache (branch)
-        if: success() && github.event_name == 'push'
-        continue-on-error: true
-        uses: actions/cache/save@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5
-        with:
-          path: |
-            ${{ steps.paths.outputs.bazelisk_home }}
-            ${{ steps.paths.outputs.output_base }}
-            ${{ steps.paths.outputs.repo_contents }}
-            ${{ steps.paths.outputs.repo_cache }}
-            ${{ steps.paths.outputs.disk_cache }}
-            ${{ steps.paths.outputs.pip_cache }}
-          key: ${{ env.CACHE_KEY_PREFIX }}-bazel-${{ runner.os }}-${{ hashFiles('MODULE.bazel', 'MODULE.bazel.lock', 'WORKSPACE*', '.bazelrc*') }}
-
   docs-deploy:
     name: Deploy Documentation to GitHub Pages
     runs-on: ${{ vars.runner_labels_ghub_standard_x64 && fromJSON(vars.runner_labels_ghub_standard_x64) || vars.REPO_RUNNER_LABELS && fromJSON(vars.REPO_RUNNER_LABELS) || 'ubuntu-latest' }}
diff --git a/.github/workflows/format.yml b/.github/workflows/format.yml
index ef070c9..d95c7a9 100644
--- a/.github/workflows/format.yml
+++ b/.github/workflows/format.yml
@@ -29,12 +29,9 @@ jobs:
         uses: actions/checkout@v4.2.2
 
       - name: Setup Bazel with shared caching
-        uses: bazel-contrib/setup-bazel@0.18.0
+        uses: eclipse-score/cicd-actions/setup-bazel-cache@setup-bazel-cache/v0.0.0
         with:
-          disk-cache: false
-          repository-cache: false
-          bazelisk-cache: true
-          cache-save: ${{ github.event_name == 'push' }}
+          unique-cache-name: ${{ github.workflow }}-${{ github.job }}
 
       - name: Run Formatting Check
         run: |
diff --git a/.github/workflows/license-check.yml b/.github/workflows/license-check.yml
index 6233ac8..e047f88 100644
--- a/.github/workflows/license-check.yml
+++ b/.github/workflows/license-check.yml
@@ -44,12 +44,9 @@ jobs:
           repository: ${{ github.event.pull_request.head.repo.full_name || github.repository }}
 
       - name: Setup Bazel with shared caching
-        uses: bazel-contrib/setup-bazel@0.18.0
+        uses: eclipse-score/cicd-actions/setup-bazel-cache@setup-bazel-cache/v0.0.0
         with:
-          disk-cache: true
-          repository-cache: true
-          bazelisk-cache: true
-          cache-save: ${{ github.event_name == 'push' }}
+          unique-cache-name: ${{ github.workflow }}-${{ github.job }}
 
       - name: Run License Check via Bazel
         run: |
diff --git a/.github/workflows/on-pr.yml b/.github/workflows/on-pr.yml
index cb31506..8396a4f 100644
--- a/.github/workflows/on-pr.yml
+++ b/.github/workflows/on-pr.yml
@@ -188,12 +188,9 @@ jobs:
         uses: actions/checkout@v6
 
       - name: ⚙️ Setup Bazel with shared caching
-        uses: bazel-contrib/setup-bazel@0.18.0
+        uses: eclipse-score/cicd-actions/setup-bazel-cache@setup-bazel-cache/v0.0.0
         with:
-          disk-cache: false
-          repository-cache: false
-          bazelisk-cache: true
-          cache-save: false
+          unique-cache-name: ${{ github.workflow }}-${{ github.job }}
 
       - name: 🕵️ Detect Bazel targets
         id: detect
@@ -234,12 +231,9 @@ jobs:
         uses: actions/checkout@v6
 
       - name: ⚙️ Setup Bazel with shared caching
-        uses: bazel-contrib/setup-bazel@0.18.0
+        uses: eclipse-score/cicd-actions/setup-bazel-cache@setup-bazel-cache/v0.0.0
         with:
-          disk-cache: false
-          repository-cache: false
-          bazelisk-cache: true
-          cache-save: false
+          unique-cache-name: ${{ github.workflow }}-${{ github.job }}
 
       - name: 🖌️ Run formatting check
         run: bazel test //:format.check
@@ -254,12 +248,9 @@ jobs:
         uses: actions/checkout@v6
 
       - name: ⚙️ Setup Bazel with shared caching
-        uses: bazel-contrib/setup-bazel@0.18.0
+        uses: eclipse-score/cicd-actions/setup-bazel-cache@setup-bazel-cache/v0.0.0
         with:
-          disk-cache: false
-          repository-cache: false
-          bazelisk-cache: true
-          cache-save: false
+          unique-cache-name: ${{ github.workflow }}-${{ github.job }}
 
       - name: © Run copyright check
         run: bazel run //:copyright.check
diff --git a/.github/workflows/qnx-build.yml b/.github/workflows/qnx-build.yml
index 19a5ddb..08f7141 100644
--- a/.github/workflows/qnx-build.yml
+++ b/.github/workflows/qnx-build.yml
@@ -109,12 +109,9 @@ jobs:
           repository: ${{ github.event.pull_request.head.repo.full_name || github.repository }}
 
       - name: Setup Bazel with shared caching
-        uses: bazel-contrib/setup-bazel@c5acdfb288317d0b5c0bbd7a396a3dc868bb0f86 #v0.19.0
+        uses: eclipse-score/cicd-actions/setup-bazel-cache@setup-bazel-cache/v0.0.0
         with:
-          disk-cache: ${{ inputs.bazel-disk-cache }}
-          repository-cache: true
-          bazelisk-cache: true
-          cache-save: ${{ github.event_name == 'push' }}
+          unique-cache-name: ${{ github.workflow }}-${{ github.job }}
 
       - uses: eclipse-score/cicd-actions/unblock-user-namespace-for-linux-sandbox@30ed908edcf367bc38ebff5b386a244f9b6417a7 # 2025-06-04
 
diff --git a/.github/workflows/rust-coverage.yml b/.github/workflows/rust-coverage.yml
index 3930ba5..ebf1f4c 100644
--- a/.github/workflows/rust-coverage.yml
+++ b/.github/workflows/rust-coverage.yml
@@ -69,12 +69,9 @@ jobs:
           repository: ${{ github.event.pull_request.head.repo.full_name || github.repository }}
 
       - name: Setup Bazel with shared caching
-        uses: bazel-contrib/setup-bazel@0.18.0
+        uses: eclipse-score/cicd-actions/setup-bazel-cache@setup-bazel-cache/v0.0.0
         with:
-          disk-cache: true
-          repository-cache: true
-          bazelisk-cache: true
-          cache-save: ${{ github.event_name == 'push' }}
+          unique-cache-name: ${{ github.workflow }}-${{ github.job }}
 
       - name: Run Rust tests with coverage instrumentation
         run: |
diff --git a/.github/workflows/static-analysis.yml b/.github/workflows/static-analysis.yml
index 8bf3701..e51016d 100644
--- a/.github/workflows/static-analysis.yml
+++ b/.github/workflows/static-analysis.yml
@@ -40,12 +40,9 @@ jobs:
         uses: actions/checkout@v4.2.2
 
       - name: Setup Bazel with shared caching
-        uses: bazel-contrib/setup-bazel@0.18.0
+        uses: eclipse-score/cicd-actions/setup-bazel-cache@setup-bazel-cache/v0.0.0
         with:
-          disk-cache: true
-          repository-cache: true
-          bazelisk-cache: true
-          cache-save: ${{ github.event_name == 'push' }}
+          unique-cache-name: ${{ github.workflow }}-${{ github.job }}
 
       - name: Run Clippy via Bazel build
         id: bazel-build
diff --git a/.github/workflows/tests.yml b/.github/workflows/tests.yml
index 4e9bb0a..2e299b6 100644
--- a/.github/workflows/tests.yml
+++ b/.github/workflows/tests.yml
@@ -59,12 +59,9 @@ jobs:
           cache: false
 
       - name: Setup Bazel with shared caching
-        uses: bazel-contrib/setup-bazel@0.18.0
+        uses: eclipse-score/cicd-actions/setup-bazel-cache@setup-bazel-cache/v0.0.0
         with:
-          disk-cache: true
-          repository-cache: true
-          bazelisk-cache: true
-          cache-save: ${{ github.event_name == 'push' }}
+          unique-cache-name: ${{ github.workflow }}-${{ github.job }}
 
       - name: Run Tests via Bazel
         run: |
diff --git a/README.md b/README.md
index 001700b..6865d91 100644
--- a/README.md
+++ b/README.md
@@ -627,35 +627,6 @@ uses: eclipse-score/cicd-workflows/.github/workflows/tests.yml@v1.0.0
 
 ---
 
-## ⚡️ Bazel Setup with Shared Caching
-
-To improve performance and reduce redundant downloads across workflow runs, the reusable workflows configure Bazel with shared caching:
-
-```yaml
-- name: Setup Bazel with shared caching
-  uses: bazel-contrib/setup-bazel@0.18.0
-  with:
-    disk-cache: true
-    repository-cache: true
-    bazelisk-cache: true
-    cache-save: ${{ github.event_name == 'push' }}
-```
-
-### Benefits
-
-- **`disk-cache`**: Stores compiled Bazel outputs across jobs.
-- **`repository-cache`**: Caches external dependencies (e.g., modules, WORKSPACE fetches).
-- **`bazelisk-cache`**: Avoids re-downloading Bazel binaries.
-- **`cache-save`**: Saves the cache only on push events to avoid unnecessary cache updates (e.g., from pull requests).
-
-This setup significantly reduces CI build time and improves reuse across different workflows.
-
-
-### **Summary**
-✅ **Standardized** CI/CD workflows across all projects  
-✅ **Reusable & Maintainable** with centralized updates  
-✅ **Bazel-powered** for consistent testing & analysis
-
 ## 🏃‍♂️ Runner Selection Logic
 
 All workflows in this repository use the following logic for selecting the runner:

From f0a6f559b25dc5c43cf26daef57a88f193ec6cfc Mon Sep 17 00:00:00 2001
From: Alexander Lanin <Alexander.Lanin@etas.com>
Date: Mon, 15 Jun 2026 22:52:37 +0200
Subject: [PATCH 2/3] use sha

---
 .github/workflows/bzlmod-lock-check.yml | 4 ++--
 .github/workflows/copyright.yml         | 2 +-
 .github/workflows/cpp-coverage.yml      | 2 +-
 .github/workflows/docs-verify.yml       | 2 +-
 .github/workflows/docs.yml              | 2 +-
 .github/workflows/format.yml            | 2 +-
 .github/workflows/license-check.yml     | 2 +-
 .github/workflows/on-pr.yml             | 6 +++---
 .github/workflows/qnx-build.yml         | 2 +-
 .github/workflows/rust-coverage.yml     | 2 +-
 .github/workflows/static-analysis.yml   | 2 +-
 .github/workflows/tests.yml             | 2 +-
 12 files changed, 15 insertions(+), 15 deletions(-)

diff --git a/.github/workflows/bzlmod-lock-check.yml b/.github/workflows/bzlmod-lock-check.yml
index f6e484f..ec4bf89 100644
--- a/.github/workflows/bzlmod-lock-check.yml
+++ b/.github/workflows/bzlmod-lock-check.yml
@@ -66,7 +66,7 @@ jobs:
         uses: actions/checkout@v4.2.2
 
       - name: Setup Bazel with shared caching
-        uses: eclipse-score/cicd-actions/setup-bazel-cache@setup-bazel-cache/v0.0.0
+        uses: eclipse-score/cicd-actions/setup-bazel-cache@659dcbed63f6b7fbde88c7850125ea0a0a92f939 # setup-bazel-cache/v0.0.0
         with:
           unique-cache-name: ${{ github.workflow }}-${{ github.job }}
 
@@ -86,7 +86,7 @@ jobs:
         uses: actions/checkout@v4.2.2
 
       - name: Setup Bazel with shared caching
-        uses: eclipse-score/cicd-actions/setup-bazel-cache@setup-bazel-cache/v0.0.0
+        uses: eclipse-score/cicd-actions/setup-bazel-cache@659dcbed63f6b7fbde88c7850125ea0a0a92f939 # setup-bazel-cache/v0.0.0
         with:
           unique-cache-name: ${{ github.workflow }}-${{ github.job }}
 
diff --git a/.github/workflows/copyright.yml b/.github/workflows/copyright.yml
index ac91887..2a8e81b 100644
--- a/.github/workflows/copyright.yml
+++ b/.github/workflows/copyright.yml
@@ -30,7 +30,7 @@ jobs:
         uses: actions/checkout@v4.2.2
 
       - name: Setup Bazel with shared caching
-        uses: eclipse-score/cicd-actions/setup-bazel-cache@setup-bazel-cache/v0.0.0
+        uses: eclipse-score/cicd-actions/setup-bazel-cache@659dcbed63f6b7fbde88c7850125ea0a0a92f939 # setup-bazel-cache/v0.0.0
         with:
           unique-cache-name: ${{ github.workflow }}-${{ github.job }}
 
diff --git a/.github/workflows/cpp-coverage.yml b/.github/workflows/cpp-coverage.yml
index 56f3cb8..baa1a6b 100644
--- a/.github/workflows/cpp-coverage.yml
+++ b/.github/workflows/cpp-coverage.yml
@@ -74,7 +74,7 @@ jobs:
         uses: actions/checkout@v6
 
       - name: Setup Bazel with shared caching
-        uses: eclipse-score/cicd-actions/setup-bazel-cache@setup-bazel-cache/v0.0.0
+        uses: eclipse-score/cicd-actions/setup-bazel-cache@659dcbed63f6b7fbde88c7850125ea0a0a92f939 # setup-bazel-cache/v0.0.0
         with:
           unique-cache-name: ${{ github.workflow }}-${{ github.job }}
 
diff --git a/.github/workflows/docs-verify.yml b/.github/workflows/docs-verify.yml
index 177ca29..697eeda 100644
--- a/.github/workflows/docs-verify.yml
+++ b/.github/workflows/docs-verify.yml
@@ -49,7 +49,7 @@ jobs:
           repository: ${{ github.event.pull_request.head.repo.full_name || github.repository }}
 
       - name: Setup Bazel
-        uses: eclipse-score/cicd-actions/setup-bazel-cache@setup-bazel-cache/v0.0.0
+        uses: eclipse-score/cicd-actions/setup-bazel-cache@659dcbed63f6b7fbde88c7850125ea0a0a92f939 # setup-bazel-cache/v0.0.0
         with:
           unique-cache-name: ${{ github.workflow }}-${{ github.job }}
 
diff --git a/.github/workflows/docs.yml b/.github/workflows/docs.yml
index 6d86960..c955889 100644
--- a/.github/workflows/docs.yml
+++ b/.github/workflows/docs.yml
@@ -99,7 +99,7 @@ jobs:
           persist-credentials: false
 
       - name: Setup Bazel
-        uses: eclipse-score/cicd-actions/setup-bazel-cache@setup-bazel-cache/v0.0.0
+        uses: eclipse-score/cicd-actions/setup-bazel-cache@659dcbed63f6b7fbde88c7850125ea0a0a92f939 # setup-bazel-cache/v0.0.0
         with:
           unique-cache-name: ${{ github.workflow }}-${{ github.job }}
 
diff --git a/.github/workflows/format.yml b/.github/workflows/format.yml
index d95c7a9..25166bf 100644
--- a/.github/workflows/format.yml
+++ b/.github/workflows/format.yml
@@ -29,7 +29,7 @@ jobs:
         uses: actions/checkout@v4.2.2
 
       - name: Setup Bazel with shared caching
-        uses: eclipse-score/cicd-actions/setup-bazel-cache@setup-bazel-cache/v0.0.0
+        uses: eclipse-score/cicd-actions/setup-bazel-cache@659dcbed63f6b7fbde88c7850125ea0a0a92f939 # setup-bazel-cache/v0.0.0
         with:
           unique-cache-name: ${{ github.workflow }}-${{ github.job }}
 
diff --git a/.github/workflows/license-check.yml b/.github/workflows/license-check.yml
index e047f88..291489a 100644
--- a/.github/workflows/license-check.yml
+++ b/.github/workflows/license-check.yml
@@ -44,7 +44,7 @@ jobs:
           repository: ${{ github.event.pull_request.head.repo.full_name || github.repository }}
 
       - name: Setup Bazel with shared caching
-        uses: eclipse-score/cicd-actions/setup-bazel-cache@setup-bazel-cache/v0.0.0
+        uses: eclipse-score/cicd-actions/setup-bazel-cache@659dcbed63f6b7fbde88c7850125ea0a0a92f939 # setup-bazel-cache/v0.0.0
         with:
           unique-cache-name: ${{ github.workflow }}-${{ github.job }}
 
diff --git a/.github/workflows/on-pr.yml b/.github/workflows/on-pr.yml
index 8396a4f..8d749ce 100644
--- a/.github/workflows/on-pr.yml
+++ b/.github/workflows/on-pr.yml
@@ -188,7 +188,7 @@ jobs:
         uses: actions/checkout@v6
 
       - name: ⚙️ Setup Bazel with shared caching
-        uses: eclipse-score/cicd-actions/setup-bazel-cache@setup-bazel-cache/v0.0.0
+        uses: eclipse-score/cicd-actions/setup-bazel-cache@659dcbed63f6b7fbde88c7850125ea0a0a92f939 # setup-bazel-cache/v0.0.0
         with:
           unique-cache-name: ${{ github.workflow }}-${{ github.job }}
 
@@ -231,7 +231,7 @@ jobs:
         uses: actions/checkout@v6
 
       - name: ⚙️ Setup Bazel with shared caching
-        uses: eclipse-score/cicd-actions/setup-bazel-cache@setup-bazel-cache/v0.0.0
+        uses: eclipse-score/cicd-actions/setup-bazel-cache@659dcbed63f6b7fbde88c7850125ea0a0a92f939 # setup-bazel-cache/v0.0.0
         with:
           unique-cache-name: ${{ github.workflow }}-${{ github.job }}
 
@@ -248,7 +248,7 @@ jobs:
         uses: actions/checkout@v6
 
       - name: ⚙️ Setup Bazel with shared caching
-        uses: eclipse-score/cicd-actions/setup-bazel-cache@setup-bazel-cache/v0.0.0
+        uses: eclipse-score/cicd-actions/setup-bazel-cache@659dcbed63f6b7fbde88c7850125ea0a0a92f939 # setup-bazel-cache/v0.0.0
         with:
           unique-cache-name: ${{ github.workflow }}-${{ github.job }}
 
diff --git a/.github/workflows/qnx-build.yml b/.github/workflows/qnx-build.yml
index 08f7141..8848b7b 100644
--- a/.github/workflows/qnx-build.yml
+++ b/.github/workflows/qnx-build.yml
@@ -109,7 +109,7 @@ jobs:
           repository: ${{ github.event.pull_request.head.repo.full_name || github.repository }}
 
       - name: Setup Bazel with shared caching
-        uses: eclipse-score/cicd-actions/setup-bazel-cache@setup-bazel-cache/v0.0.0
+        uses: eclipse-score/cicd-actions/setup-bazel-cache@659dcbed63f6b7fbde88c7850125ea0a0a92f939 # setup-bazel-cache/v0.0.0
         with:
           unique-cache-name: ${{ github.workflow }}-${{ github.job }}
 
diff --git a/.github/workflows/rust-coverage.yml b/.github/workflows/rust-coverage.yml
index ebf1f4c..b14acea 100644
--- a/.github/workflows/rust-coverage.yml
+++ b/.github/workflows/rust-coverage.yml
@@ -69,7 +69,7 @@ jobs:
           repository: ${{ github.event.pull_request.head.repo.full_name || github.repository }}
 
       - name: Setup Bazel with shared caching
-        uses: eclipse-score/cicd-actions/setup-bazel-cache@setup-bazel-cache/v0.0.0
+        uses: eclipse-score/cicd-actions/setup-bazel-cache@659dcbed63f6b7fbde88c7850125ea0a0a92f939 # setup-bazel-cache/v0.0.0
         with:
           unique-cache-name: ${{ github.workflow }}-${{ github.job }}
 
diff --git a/.github/workflows/static-analysis.yml b/.github/workflows/static-analysis.yml
index e51016d..280e533 100644
--- a/.github/workflows/static-analysis.yml
+++ b/.github/workflows/static-analysis.yml
@@ -40,7 +40,7 @@ jobs:
         uses: actions/checkout@v4.2.2
 
       - name: Setup Bazel with shared caching
-        uses: eclipse-score/cicd-actions/setup-bazel-cache@setup-bazel-cache/v0.0.0
+        uses: eclipse-score/cicd-actions/setup-bazel-cache@659dcbed63f6b7fbde88c7850125ea0a0a92f939 # setup-bazel-cache/v0.0.0
         with:
           unique-cache-name: ${{ github.workflow }}-${{ github.job }}
 
diff --git a/.github/workflows/tests.yml b/.github/workflows/tests.yml
index 2e299b6..78e1bb1 100644
--- a/.github/workflows/tests.yml
+++ b/.github/workflows/tests.yml
@@ -59,7 +59,7 @@ jobs:
           cache: false
 
       - name: Setup Bazel with shared caching
-        uses: eclipse-score/cicd-actions/setup-bazel-cache@setup-bazel-cache/v0.0.0
+        uses: eclipse-score/cicd-actions/setup-bazel-cache@659dcbed63f6b7fbde88c7850125ea0a0a92f939 # setup-bazel-cache/v0.0.0
         with:
           unique-cache-name: ${{ github.workflow }}-${{ github.job }}
 

From 6fa9a537d758f866f164f2629f45af7fe712129f Mon Sep 17 00:00:00 2001
From: Alexander Lanin <Alexander.Lanin@etas.com>
Date: Tue, 16 Jun 2026 14:07:49 +0200
Subject: [PATCH 3/3] fix mod tidy

---
 .github/workflows/bzlmod-lock-check.yml | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/.github/workflows/bzlmod-lock-check.yml b/.github/workflows/bzlmod-lock-check.yml
index ec4bf89..37fcae0 100644
--- a/.github/workflows/bzlmod-lock-check.yml
+++ b/.github/workflows/bzlmod-lock-check.yml
@@ -70,6 +70,12 @@ jobs:
         with:
           unique-cache-name: ${{ github.workflow }}-${{ github.job }}
 
+      - name: Check MODULE.bazel formatting
+        working-directory: ${{ inputs.working-directory }}
+        run: |
+          bazel mod tidy
+          git diff --exit-code
+
   bzlmod-lockfile-check:
     runs-on: ${{ vars.runner_labels_ghub_standard_x64 && fromJSON(vars.runner_labels_ghub_standard_x64) || vars.REPO_RUNNER_LABELS && fromJSON(vars.REPO_RUNNER_LABELS) || 'ubuntu-latest' }}
     steps: