[fix] env in workflow

Author: rvalitov

.github/workflows/codacy.yml

@@ -22,7 +22,6 @@ permissions:
   contents: read
 
 env:
-  UBUNTU_VERSION: ubuntu-latest
   NODE_VERSION: latest
   PHP_VERSION: 8.3
   PHPUNIT_VERSION: 11
@@ -34,7 +33,7 @@ jobs:
       security-events: write # for github/codeql-action/upload-sarif to upload SARIF results
       actions: read # only required for a private repository by github/codeql-action/upload-sarif to get the Action run status
     name: Codacy Security Scan
-    runs-on: ${{ env.UBUNTU_VERSION }}
+    runs-on: ubuntu-latest
     steps:
       # Checkout the repository to the GitHub Actions runner
       - name: Checkout code
@@ -64,7 +63,7 @@ jobs:
 
   codacy-coverage-reporter:
     name: Codacy Coverage Reporter
-    runs-on: ${{ env.UBUNTU_VERSION }}
+    runs-on: ubuntu-latest
     steps:
       - name: Setup PHP ${{ env.PHP_VERSION }}
         uses: shivammathur/setup-php@v2

.github/workflows/dependency-review.yml

@@ -5,19 +5,18 @@
 # Source repository: https://github.com/actions/dependency-review-action
 # Public documentation: https://docs.github.com/en/code-security/supply-chain-security/understanding-your-software-supply-chain/about-dependency-review#dependency-review-enforcement
 name: "Dependency Review"
-on: [pull_request]
+on:
+  pull_request:
+    branches: [ "master", "main" ]
 
 permissions:
   contents: read
   pull-requests: write
 
-env:
-  UBUNTU_VERSION: ubuntu-latest
-
 jobs:
   dependency-review:
     name: Dependency Review
-    runs-on: ${{ env.UBUNTU_VERSION }}
+    runs-on: ubuntu-latest
     steps:
       - name: "Checkout Repository"
         uses: actions/checkout@v4

.github/workflows/devskim.yml

@@ -15,13 +15,10 @@ on:
   # eslint-disable-next-line yml/no-empty-mapping-value
   workflow_dispatch:
 
-env:
-  UBUNTU_VERSION: ubuntu-latest
-
 jobs:
   lint:
     name: DevSkim
-    runs-on: ${{ env.UBUNTU_VERSION }}
+    runs-on: ubuntu-latest
     permissions:
       actions: read
       contents: read

.github/workflows/sonarcloud.yml

@@ -19,15 +19,14 @@ permissions:
   pull-requests: read # allows SonarCloud to decorate PRs with analysis results
 
 env:
-  UBUNTU_VERSION: ubuntu-latest
   NODE_VERSION: latest
   PHP_VERSION: 8.3
   PHPUNIT_VERSION: 11
 
 jobs:
   sonarqube:
     name: SonarQube
-    runs-on: ${{ env.UBUNTU_VERSION }}
+    runs-on: ubuntu-latest
 
     steps:
       - name: Setup PHP ${{ env.PHP_VERSION }}