Simplify actions: remove unnecessary inputs and always use best defaults

- Remove require statements for path/exec (available by default in github-script)
- Remove report-format input from lint action (always auto-detect)
- Remove fail-on-error inputs (always fail on error for consistency)
- Change test coverage default to "github" for better DX
- Remove codecov-token input (always use OIDC)
- Update codecov action to always use OIDC
- Replace sticky-pull-request-comment with hoverkraft create-or-update-comment
- Use jaxxstorm/action-install-gh-release for codecov dependencies
- Remove redundant final failure checks (handled in main script)

Co-authored-by: neilime <[email protected]>
Signed-off-by: Emilien Escalle <[email protected]>

Author: Copilot

.github/workflows/__main-ci.yml

@@ -24,7 +24,7 @@ jobs:
       actions: read
       contents: read
       packages: write
-      pull-requests: read
+      pull-requests: write
       id-token: write
       issues: read
       security-events: write

.github/workflows/__pull-request-ci.yml

@@ -18,7 +18,7 @@ jobs:
       actions: read
       contents: read
       packages: write
-      pull-requests: read
+      pull-requests: write
       id-token: write
       issues: read
       security-events: write

.github/workflows/__shared-ci.yml

@@ -49,7 +49,7 @@ jobs:
     permissions:
       contents: read
       packages: write
-      pull-requests: read
+      pull-requests: write
       id-token: write
       issues: read
       security-events: write

.github/workflows/__test-workflow-continuous-integration.yml

@@ -11,6 +11,7 @@ jobs:
     uses: ./.github/workflows/continuous-integration.yml
     permissions:
       contents: read
+      pull-requests: write
       security-events: write
       # FIXME: This is a workaround for having workflow ref. See https://github.com/orgs/community/discussions/38659
       id-token: write
@@ -35,6 +36,24 @@ jobs:
       - name: Check the build artifacts
         run: test -f tests/npm/dist/test.txt
 
+  act-without-container-and-github-reports:
+    name: Act - Run the continuous integration workflow (without container and GitHub reports)
+    uses: ./.github/workflows/continuous-integration.yml
+    permissions:
+      contents: read
+      pull-requests: write
+      security-events: write
+      # FIXME: This is a workaround for having workflow ref. See https://github.com/orgs/community/discussions/38659
+      id-token: write
+    with:
+      working-directory: tests/npm
+      build: |
+        {
+          "artifact": "dist"
+        }
+      test: |
+        {"coverage": "github"}
+
   arrange-with-container:
     permissions:
       id-token: write
@@ -63,6 +82,7 @@ jobs:
     needs: arrange-with-container
     permissions:
       contents: read
+      pull-requests: write
       security-events: write
       # FIXME: This is a workaround for having workflow ref. See https://github.com/orgs/community/discussions/38659
       id-token: write
@@ -73,6 +93,8 @@ jobs:
         {
           "artifact": "dist"
         }
+      test: |
+        {"coverage": "codecov"}
 
   assert-with-container:
     name: Assert - Ensure build artifact has been uploaded (with container)

.github/workflows/continuous-integration.yml

@@ -52,10 +52,13 @@ on:
         required: false
         default: true
       lint:
-        description: "Optional flag to enable linting."
-        type: boolean
+        description: |
+          Whether to enable linting.
+          Set to `null` or empty to disable.
+          Accepts a JSON object for lint options. See [lint action](../actions/lint/README.md).
+        type: string
         required: false
-        default: true
+        default: "true"
       code-ql:
         description: "Code QL analysis language. See <https://github.com/github/codeql-action>."
         type: string
@@ -67,15 +70,13 @@ on:
         required: false
         default: true
       test:
-        description: "Optional flag to enable test."
-        type: boolean
-        required: false
-        default: true
-      coverage:
-        description: "Specify code coverage reporter. Supported values: `codecov`."
+        description: |
+          Whether to enable testing.
+          Set to `null` or empty to disable.
+          Accepts a JSON object for test options. See [test action](../actions/test/README.md).
         type: string
         required: false
-        default: "codecov"
+        default: "true"
       working-directory:
         description: "Working directory where the dependencies are installed."
         type: string
@@ -247,7 +248,7 @@ jobs:
 
   lint:
     name: 👕 Lint
-    if: inputs.checks == true && inputs.lint != false
+    if: inputs.checks == true && inputs.lint
     runs-on: ${{ inputs.runs-on && fromJson(inputs.runs-on) || 'ubuntu-latest' }}
     container:
       image: ${{ inputs.container != '' && inputs.container || null }}
@@ -277,6 +278,23 @@ jobs:
           if [ -f .gitignore ]; then grep -q "self-workflow" .gitignore || echo "self-workflow" >> .gitignore; else echo "self-workflow" >> .gitignore; fi
           if [ -f .dockerignore ]; then grep -q "self-workflow" .dockerignore || echo "self-workflow" >> .dockerignore; else echo "self-workflow" >> .dockerignore; fi
       # jscpd:ignore-end
+      - id: preparel-lint-options
+        uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea # v7.0.1
+        env:
+          LINT_INPUT: ${{ inputs.lint }}
+        with:
+          script: |
+            const lintInput = process.env.LINT_INPUT.trim();
+            if (lintInput && lintInput !== 'true') {
+              try {
+                const parsed = JSON.parse(lintInput);
+                lintOptions = { ...lintOptions, ...parsed };
+              } catch (error) {
+                core.setFailed(`Failed to parse lint input as JSON: ${error.message}`);
+                return;
+              }
+            }
+
       - uses: ./self-workflow/actions/lint
         with:
           working-directory: ${{ inputs.working-directory }}
@@ -332,7 +350,7 @@ jobs:
 
   test:
     name: 🧪 Test
-    if: inputs.checks == true && inputs.test == true
+    if: inputs.checks == true && inputs.test
     runs-on: ${{ inputs.runs-on && fromJson(inputs.runs-on) || 'ubuntu-latest' }}
     container:
       image: ${{ inputs.container != '' && inputs.container || null }}
@@ -343,9 +361,9 @@ jobs:
       - build
     permissions:
       contents: read
+      pull-requests: write
       # FIXME: This is a workaround for having workflow ref. See https://github.com/orgs/community/discussions/38659
       id-token: write
-      pull-requests: write
     steps:
       - uses: hoverkraft-tech/ci-github-common/actions/checkout@753288393de1f3d92f687a6761d236ca800f5306 # 0.28.1
         if: inputs.container == ''
@@ -370,9 +388,34 @@ jobs:
           if [ -f .gitignore ]; then grep -q "self-workflow" .gitignore || echo "self-workflow" >> .gitignore; else echo "self-workflow" >> .gitignore; fi
           if [ -f .dockerignore ]; then grep -q "self-workflow" .dockerignore || echo "self-workflow" >> .dockerignore; else echo "self-workflow" >> .dockerignore; fi
 
+      - id: prepare-test-options
+        uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea # v7.0.1
+        env:
+          TEST_INPUT: ${{ inputs.test }}
+        with:
+          script: |
+            const testInput = process.env.TEST_INPUT.trim();
+            if (testInput && testInput !== 'true') {
+              try {
+                const parsed = JSON.parse(testInput);
+                testOptions = { ...testOptions, ...parsed };
+              } catch (error) {
+                core.setFailed(`Failed to parse test input as JSON: ${error.message}`);
+                return;
+              }
+            }
+
+            if (testOptions.coverage === undefined) {
+              testOptions.coverage = 'github';
+            }
+            core.setOutput('coverage', testOptions.coverage );
+
+            core.setOutput('coverage-files', testOptions['coverage-files'] || '');
+
       - uses: ./self-workflow/actions/test
         with:
           working-directory: ${{ inputs.working-directory }}
           container: ${{ inputs.container != '' }}
-          coverage: ${{ inputs.coverage }}
+          coverage: ${{ steps.prepare-test-options.outputs.coverage }}
+          coverage-files: ${{ steps.prepare-test-options.outputs['coverage-files'] }}
           github-token: ${{ github.token }}

actions/build/README.md

@@ -1,6 +1,6 @@
 <!-- header:start -->
 
-# ![Icon](data:image/svg+xml;base64,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) GitHub Action: Build
+# ![Icon](data:image/svg+xml;base64,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) GitHub Action: Build
 
 <div align="center">
   <img src="https://opengraph.githubassets.com/b83a39d0a270998cbae0974683a11eba4481aa44bbb4abbc39522474251c5b0a/hoverkraft-tech/ci-github-nodejs" width="60px" align="center" alt="Build" />
@@ -30,7 +30,7 @@ Action to build Node.js projects with support for custom commands, environment v
 ## Usage
 
 ````yaml
-- uses: hoverkraft-tech/ci-github-nodejs/actions/build@db1c1d36ff3e87c4513eded15d85acb78dcbd9b9 # copilot/refactor-ci-actions-lint-test
+- uses: hoverkraft-tech/ci-github-nodejs/actions/build@dde8f0c67661ed66da8871a9fb104d36e146d644 # copilot/refactor-ci-actions-lint-test
   with:
     # Working directory where the build commands are executed.
     # Can be absolute or relative to the repository root.
@@ -87,7 +87,6 @@ Action to build Node.js projects with support for custom commands, environment v
 |                         | Format: {"name": "artifact-name", "paths": "path1\npath2"}                                                                              |              |             |
 | **`container`**         | Whether running in container mode (skips checkout and node setup)                                                                       | **false**    | `false`     |
 
-<!-- jscpd:ignore-start -->
 <!-- inputs:end -->
 <!-- secrets:start -->
 <!-- secrets:end -->
@@ -102,6 +101,11 @@ Action to build Node.js projects with support for custom commands, environment v
 <!-- outputs:end -->
 <!-- examples:start -->
 <!-- examples:end -->
+
+<!--
+// jscpd:ignore-start
+-->
+
 <!-- contributing:start -->
 
 ## Contributing
@@ -119,7 +123,7 @@ This project is licensed under the MIT License.
 
 SPDX-License-Identifier: MIT
 
-Copyright © 2025 Hoverkraft
+Copyright © 2025 hoverkraft
 
 For more details, see the [license](http://choosealicense.com/licenses/mit/).
 
@@ -131,4 +135,7 @@ For more details, see the [license](http://choosealicense.com/licenses/mit/).
 This documentation was automatically generated by [CI Dokumentor](https://github.com/hoverkraft-tech/ci-dokumentor).
 
 <!-- generated:end -->
-<!-- jscpd:ignore-end -->
+
+<!--
+// jscpd:ignore-end
+-->

actions/build/action.yml

@@ -28,8 +28,8 @@ inputs:
       Multi-line string of secrets in env format (KEY=VALUE).
       Example:
       ```
-      SECRET_KEY=${{ secrets.SECRET_KEY }}
-      API_TOKEN=${{ secrets.API_TOKEN }}
+      SECRET_KEY=$\{{ secrets.SECRET_KEY }}
+      API_TOKEN=$\{{ secrets.API_TOKEN }}
       ```
     required: false
     default: ""
@@ -102,17 +102,13 @@ runs:
             core.exportVariable(key.trim(), value.trim());
           }
 
-    # jscpd:ignore-start
     - uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea # v7.0.1
       env:
         BUILD_COMMANDS: ${{ inputs.build-commands }}
         RUN_SCRIPT_COMMAND: ${{ inputs.container == 'true' && steps.get-package-manager.outputs.run-script-command || steps.setup-node.outputs.run-script-command }}
         WORKING_DIRECTORY: ${{ inputs.working-directory }}
       with:
         script: |
-          const path = require('node:path');
-          const exec = require('@actions/exec');
-
           const buildCommands = process.env.BUILD_COMMANDS || '';
           const runScriptCommand = process.env.RUN_SCRIPT_COMMAND;
           const workingDirectory = process.env.WORKING_DIRECTORY || '.';
@@ -122,21 +118,25 @@ runs:
             .filter(Boolean);
 
           for (const command of commands) {
-            core.info(`\n🏗️ Running build command: ${command}`);
+            core.info(`Running build command: ${command}`);
             
             try {
               const result = await exec.getExecOutput(runScriptCommand, [command], {
-                cwd: path.resolve(process.env.GITHUB_WORKSPACE, workingDirectory)
+                cwd: require('path').resolve(process.env.GITHUB_WORKSPACE, workingDirectory)
               });
               
-              if (result.stdout) core.info(result.stdout);
-              if (result.stderr) core.warning(result.stderr);
+              if (result.stdout) {
+                core.info(result.stdout);
+              }
+              if (result.stderr) {
+                core.warning(result.stderr);
+              }
             } catch (error) {
               core.setFailed(`Build command "${command}" failed: ${error.message}`);
               throw error;
             }
           }
-    # jscpd:ignore-end
+
     - id: build-artifact-id
       if: inputs.build-artifact != ''
       uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4 # v5.0.0