test: update CI

* Add Cheshire integration tests.
* Add PULP Gitlab CI.
* Track Bender.lock file.
* Deactivate 'stale' workflow.
* Do not trigger RISC-V tests on push.
* Report formatting issues via github annotations.
* Deactivate verible check for external repos due to security
concerns (`pull_request_target`)

Co-authored-by: Enrico Zelioli <ezelioli@iis.ee.ethz.ch>
Signed-off-by: Nils Wistoff <nwistoff@iis.ee.ethz.ch>

Author: niwis

.github/workflows/ci.yml

@@ -4,7 +4,7 @@
 
 # Run functional regression checks
 name: ci
-on: [push, pull_request]
+on: [pull_request, workflow_dispatch]
 
 jobs:
   build-riscv-tests:

.github/workflows/integration.yml

@@ -0,0 +1,25 @@
+# Copyright 2024 PULP Platform
+# Licensed under the Apache License, Version 2.0, see LICENSE for details.
+# SPDX-License-Identifier: Apache-2.0
+
+# Author: Nils Wistoff <nwistoff@iis.ee.ethz.ch>
+
+name: integration
+on: [ pull_request, workflow_dispatch ]
+
+jobs:
+  cheshire-integration:
+    runs-on: ubuntu-latest
+    timeout-minutes: 200
+    # Skip on forks due to missing secrets.
+    if: github.repository == 'pulp-platform/cva6' && (github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == github.repository)
+    steps:
+      - name: Integrate into cheshire
+        uses: pulp-platform/pulp-actions/integrate@v2.3.0
+        with:
+          ip-name: cva6
+          org: pulp-platform
+          repo: cheshire
+          base-ref: 4098faa23b8686e7a53936634dfd9fee6e88ede9
+          token: ${{ secrets.CHESHIRE_TOKEN }}
+          lifetime: 14

.github/workflows/pulp-gitlab-ci.yml

@@ -0,0 +1,18 @@
+name: pulp-gitlab-ci
+
+on: [ push, pull_request, workflow_dispatch ]
+
+jobs:
+  pulp-gitlab-ci:
+    runs-on: ubuntu-latest
+    timeout-minutes: 60
+    # Skip on forks or pull requests from forks due to missing secrets.
+    if: github.repository == 'pulp-platform/cva6' && (github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == github.repository)
+    steps:
+      - name: Check Gitlab CI
+        uses: pulp-platform/pulp-actions/gitlab-ci@v2.4.5
+        with:
+          domain: iis-git.ee.ethz.ch
+          repo: github-mirror/cva6
+          token: ${{ secrets.GITLAB_TOKEN }}
+          poll-period: 30

.github/workflows/stale.yml

@@ -4,9 +4,9 @@
 
 name: 'Close stale issues and PRs'
 on:
-  workflow_dispatch:
-  schedule:
-      - cron: '30 1 * * *'
+  workflow_dispatch
+#  schedule:
+#      - cron: '30 1 * * *'
 
 jobs:
   stale:

.github/workflows/verible.yml

@@ -3,19 +3,25 @@
 # SPDX-License-Identifier: Apache-2.0
 
 name: Verible
-on:
-  pull_request:
+on: [push, pull_request, workflow_dispatch]
 
 jobs:
   format:
     runs-on: ubuntu-latest
+    permissions:
+      checks: write
+      contents: read
+      pull-requests: write
+    # Skip on forks due to missing secrets.
+    if: github.repository == 'pulp-platform/cva6' && (github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == github.repository)
     steps:
       - uses: actions/checkout@v7
       - uses: chipsalliance/verible-formatter-action@main
         with:
           github_token: ${{ secrets.GITHUB_TOKEN }}
           files: '$(find core -regex ".*\.\(v\|sv\)$" | grep -v "^core/include/.*_config_pkg\.sv$")'
           fail_on_formatting_suggestions: true
+          reviewdog_reporter: github-check
       - name: CVA6Cfg's XLEN attribute usage verificatory script
         if: always()
         run: |