chore(workflows): rename and update workflows (#76)

Author: wmontwe

.github/workflows/build-components.yml

@@ -20,13 +20,13 @@ concurrency:
   cancel-in-progress: ${{ github.ref != 'refs/heads/main' }}
 
 jobs:
-  assemble:
+  assemble-components:
     name: Assemble all components
     runs-on: ubuntu-latest
     timeout-minutes: 90
 
     steps:
-      - name: Checkout the repo
+      - name: Checkout
         uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
         with:
           fetch-depth: 1
@@ -51,11 +51,11 @@ jobs:
       - name: Show disk usage
         uses: ./.github/actions/disk-usage
 
-  test-junit:
-    name: Run JUnit tests for all components
+  quality-unit-test:
+    name: Quality - Unit tests
     runs-on: ubuntu-latest
     timeout-minutes: 90
-    needs: [assemble]
+    needs: [assemble-components]
 
     steps:
       - name: Checkout the repo

.github/workflows/pulls-auto-assign.yml …ub/workflows/pr-auto-assign-reviewer.yml.github/workflows/pulls-auto-assign.yml renamed to .github/workflows/pr-auto-assign-reviewer.yml .github/workflows/pulls-auto-assign.yml renamed to .github/workflows/pr-auto-assign-reviewer.yml

@@ -7,24 +7,20 @@ on:
   pull_request_target:
     types: [review_requested]
 
+permissions:
+  contents: none
+
 jobs:
-  assign-reviewer:
+  pr-auto-assign-reviewer:
+    permissions:
+      pull-requests: write
     runs-on: ubuntu-latest
-    environment: botmobile
     steps:
-      - name: App token generate
-        uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1  # v3.2.0
-        if: ${{ vars.BOT_CLIENT_ID }}
-        id: app-token
-        with:
-          app-id: ${{ vars.BOT_CLIENT_ID }}
-          private-key: ${{ secrets.BOT_PRIVATE_KEY }}
-
       - name: Assign reviewer to PR
         if: ${{ github.event.requested_reviewer }}
         env:
+          GH_TOKEN: ${{ github.token }}
           PR_REVIEWER: ${{ github.event.requested_reviewer.login }}
           PR_NUMBER: ${{ github.event.pull_request.number }}
-          GH_TOKEN: ${{ steps.app-token.outputs.token || github.token }}
         run: |
           gh pr edit $PR_NUMBER --repo $GITHUB_REPOSITORY --add-assignee "$PR_REVIEWER"

.github/workflows/quality-checks.yml

@@ -1,4 +1,4 @@
-name: Quality checks
+name: Quality - Checks
 
 on:
   push:

.github/workflows/markdown.yml .github/workflows/quality-markdown.yml.github/workflows/markdown.yml renamed to .github/workflows/quality-markdown.yml

@@ -1,16 +1,16 @@
-name: Markdown CI
+name: Quality - Check Markdown
 
 on:
   pull_request:
     paths:
       - '**.md'
-      - '.github/workflows/markdown.yml'
+      - '.github/workflows/quality-markdown.yml'
 
 permissions:
   contents: read
 
 jobs:
-  markdown_quality:
+  quality-markdown:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout

.github/workflows/security-codeql.yml

@@ -1,4 +1,4 @@
-name: Security - CodeQL Scan
+name: Security - CodeQL
 
 on:
   schedule:
@@ -9,7 +9,7 @@ permissions:
   contents: read
 
 jobs:
-  security-codeql-scan:
+  security-codeql:
     name: Security - CodeQL Scan
 
     permissions:

.github/workflows/security-scorecard.yml

@@ -1,21 +1,17 @@
-name: Security - Scorecard supply-chain security
+name: Security - Scorecard
+
 on:
-  # For Branch-Protection check. Only the default branch is supported. See
-  # https://github.com/ossf/scorecard/blob/main/docs/checks.md#branch-protection
   branch_protection_rule:
-  # To guarantee Maintained check is occasionally updated. See
-  # https://github.com/ossf/scorecard/blob/main/docs/checks.md#maintained
   schedule:
     - cron: '19 22 * * 3'
   push:
     branches: [ "main" ]
   workflow_dispatch:
 
-permissions:
-  contents: read
+permissions: read-all
 
 jobs:
-  analysis:
+  security-scorecard:
     name: Scorecard analysis
     runs-on: ubuntu-latest
     permissions:
@@ -35,25 +31,15 @@ jobs:
         with:
           results_file: results.sarif
           results_format: sarif
-
-          # Public repositories:
-          #   - Publish results to OpenSSF REST API for easy access by consumers
-          #   - Allows the repository to include the Scorecard badge.
-          #   - See https://github.com/ossf/scorecard-action#publishing-results.
-          # For private repositories:
-          #   - `publish_results` will always be set to `false`, regardless
-          #     of the value entered here.
           publish_results: true
 
-      # Upload the results as artifacts.
       - name: "Upload artifact"
         uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
         with:
           name: SARIF file
           path: results.sarif
           retention-days: 5
 
-      # Upload the results to GitHub's code scanning dashboard.
       - name: "Upload to code-scanning"
         uses: github/codeql-action/upload-sarif@8aad20d150bbac5944a9f9d289da16a4b0d87c1e # v4.36.2
         with: