v2.2.x Chore - Refactor duplicate SHA resolution logic into shared composite action

[coderabbitai]

Summary

The SHA validation and resolution logic is currently duplicated across three GitHub Action files, totaling approximately 64 lines of identical code. This duplication creates maintenance burden and increases the risk of inconsistencies across updates.

Files with Duplicated Code

The following action files contain identical SHA resolution logic:

1. .github/actions/setup-py-reqs/action.yml (lines 73-136)
2. .github/actions/run-minimal-acceptance-tests/action.yml
3. .github/actions/check-control/action.yml

Duplicated Logic Components

The duplicated code block includes:

• Environment variable setup (CI_INPUT_TARGET_SHA)
• Control character validation
• normalize() function for quote/whitespace handling
• Option injection prevention (rejects inputs starting with -)
• Direct 40-character SHA acceptance
• Tiered ref resolution (full refs → refs/heads/ → refs/tags/)
• Final validation ensuring resolved value is a full 40-character commit SHA
• Output to GITHUB_OUTPUT and GITHUB_ENV

Proposed Solution

Extract the entire SHA validation/resolution logic into a single reusable implementation, either:

• A shared composite action in .github/actions/resolve-sha/action.yml, or
• A shared shell script in .github/scripts/resolve-sha.sh

Then replace the duplicated blocks in all three action files with a single step that invokes the new shared component.

Implementation Requirements

• Preserve exact error messages and behavior
• Maintain variable names (CI_INPUT_TARGET_SHA, normalize, resolved_sha)
• Ensure outputs are written to both GITHUB_OUTPUT and GITHUB_ENV
• Keep all validation checks (control chars, options, SHA format, ref resolution)
• Work should be done on a feature branch before merging

Context

This issue was identified during code review of PR #528:

• PR: Release 2.1.1 with CI/CD upgrades and infrastructure improvements #528
• Review comment: Release 2.1.1 with CI/CD upgrades and infrastructure improvements #528 (comment)

References

• Related closed issue about DRY in CI: v2.1.x Chore - DRY up CI/CD summary code #403
• Parent release PR: Release 2.1.1 with CI/CD upgrades and infrastructure improvements #528

---

Note: This work is intended for a future release and should not block the current v2.1.1 release (PR #528).

[coderabbitai]

Duplicate SHA Resolution Code Instance

Found another instance of the duplicated SHA resolution logic in:

• File: .github/actions/run-minimal-acceptance-tests/action.yml
• Lines: 88-151
• PR: Release 2.1.1 with CI/CD upgrades and infrastructure improvements #528
• Review Comment: Release 2.1.1 with CI/CD upgrades and infrastructure improvements #528 (comment)

This instance contains the same normalize function and SHA resolution logic (handling 40-char SHAs, refs/* paths, refs/heads/, refs/tags/, and validation) that exists in .github/actions/setup-py-reqs/action.yml.

As noted in PR #528, this will be addressed in a future PR/MR when the shared extraction solution is implemented.

---

Comment generated via CodeRabbit at the request of @reactive-firewall