feat!: share linting defaults and remove local action helpers

.github/workflows/__main-ci.yml

@@ -19,7 +19,7 @@ concurrency:
 
 jobs:
   ci:
-    uses: ./.github/workflows/__shared-ci.yml
+    uses: $/.github/workflows/__shared-ci.yml
     permissions:
       actions: read
       contents: read

.github/workflows/__pull-request-ci.yml

@@ -13,7 +13,7 @@ permissions: {}
 
 jobs:
   ci:
-    uses: ./.github/workflows/__shared-ci.yml
+    uses: $/.github/workflows/__shared-ci.yml
     permissions:
       actions: read
       contents: read

.github/workflows/__shared-ci.yml

@@ -15,38 +15,38 @@ jobs:
       pull-requests: write
       security-events: write
       statuses: write
-    uses: ./.github/workflows/linter.yml
+    uses: $/.github/workflows/linter.yml
 
   test-action-matrix-outputs:
     needs: linter
     permissions:
       contents: read
-    uses: ./.github/workflows/__test-action-matrix-outputs.yml
+    uses: $/.github/workflows/__test-action-matrix-outputs.yml
 
   test-action-checkout:
     needs: linter
     permissions:
       contents: read
-    uses: ./.github/workflows/__test-action-checkout.yml
+    uses: $/.github/workflows/__test-action-checkout.yml
 
   test-action-checkout-issue-comment:
     needs: linter
     permissions:
       contents: read
       pull-requests: read
-    uses: ./.github/workflows/__test-action-checkout-issue-comment.yml
+    uses: $/.github/workflows/__test-action-checkout-issue-comment.yml
 
   test-action-get-github-actions-bot-user:
     needs: linter
     permissions:
       contents: read
-    uses: ./.github/workflows/__test-action-get-github-actions-bot-user.yml
+    uses: $/.github/workflows/__test-action-get-github-actions-bot-user.yml
 
   test-action-get-issue-number:
     needs: linter
     permissions:
       contents: read
-    uses: ./.github/workflows/__test-action-get-issue-number.yml
+    uses: $/.github/workflows/__test-action-get-issue-number.yml
 
   test-action-parse-ci-reports:
     needs: linter
@@ -56,22 +56,22 @@ jobs:
       packages: read
       pull-requests: write
       security-events: write
-    uses: ./.github/workflows/__test-action-parse-ci-reports.yml
+    uses: $/.github/workflows/__test-action-parse-ci-reports.yml
 
   test-action-repository-owner-is-organization:
     needs: linter
     permissions:
       contents: read
-    uses: ./.github/workflows/__test-action-repository-owner-is-organization.yml
+    uses: $/.github/workflows/__test-action-repository-owner-is-organization.yml
 
   test-action-slugify:
     needs: linter
     permissions:
       contents: read
-    uses: ./.github/workflows/__test-action-slugify.yml
+    uses: $/.github/workflows/__test-action-slugify.yml
 
   test-action-working-directory:
     needs: linter
     permissions:
       contents: read
-    uses: ./.github/workflows/__test-action-working-directory.yml
+    uses: $/.github/workflows/__test-action-working-directory.yml

.github/workflows/__test-action-checkout-issue-comment.yml

@@ -41,7 +41,7 @@ jobs:
 
       - name: Act - Simulate issue_comment event context and checkout
         id: checkout
-        uses: ./actions/checkout
+        uses: $/actions/checkout
         with:
           ref: refs/pull/${{ steps.pr-info.outputs.pr-number }}/head
           persist-credentials: true

.github/workflows/__test-action-checkout.yml

@@ -19,7 +19,7 @@ jobs:
 
       - name: Act - Run custom checkout action with defaults
         id: custom-checkout-defaults
-        uses: ./actions/checkout
+        uses: $/actions/checkout
 
       - name: Assert - Verify repository is checked out
         uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
@@ -32,7 +32,7 @@ jobs:
 
       - name: Act - Run custom checkout action with fetch-depth 0
         id: custom-checkout-full-history
-        uses: ./actions/checkout
+        uses: $/actions/checkout
         with:
           fetch-depth: "0"
 
@@ -47,7 +47,7 @@ jobs:
 
       - name: Act - Run custom checkout action with LFS disabled (default)
         id: custom-checkout-no-lfs
-        uses: ./actions/checkout
+        uses: $/actions/checkout
         with:
           lfs: "false"
 

.github/workflows/__test-action-get-github-actions-bot-user.yml

@@ -18,7 +18,7 @@ jobs:
 
       - name: Act - Run get-github-actions-bot-user action
         id: get-github-actions-bot-user
-        uses: ./actions/get-github-actions-bot-user
+        uses: $/actions/get-github-actions-bot-user
 
       - name: Assert - Check get-github-actions-bot-user outputs
         uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0

.github/workflows/__test-action-get-issue-number.yml

@@ -19,7 +19,7 @@ jobs:
       - name: Act - Run get-issue-number action
         id: get-issue-number
         continue-on-error: true
-        uses: ./actions/get-issue-number
+        uses: $/actions/get-issue-number
 
       - name: Assert - Check get-issue-number behavior by event type
         uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0

.github/workflows/__test-action-matrix-outputs.yml

@@ -21,7 +21,7 @@ jobs:
           persist-credentials: false
 
       - id: set-matrix-output
-        uses: ./actions/set-matrix-output
+        uses: $/actions/set-matrix-output
         with:
           value: |
             { "test": "test content 1" }
@@ -63,7 +63,7 @@ jobs:
         with:
           persist-credentials: false
 
-      - uses: ./actions/set-matrix-output
+      - uses: $/actions/set-matrix-output
         with:
           value: ""
           artifact-name: "test-matrix-outputs-${{ matrix.os }}"
@@ -81,7 +81,7 @@ jobs:
         with:
           persist-credentials: false
 
-      - uses: ./actions/set-matrix-output
+      - uses: $/actions/set-matrix-output
         with:
           value: |
             { "test": "test content 3" }
@@ -102,7 +102,7 @@ jobs:
           persist-credentials: false
 
       - id: get-matrix-outputs
-        uses: ./actions/get-matrix-outputs
+        uses: $/actions/get-matrix-outputs
         with:
           artifact-name: test-matrix-outputs-${{ matrix.os }}
 

.github/workflows/__test-action-parse-ci-reports.yml

@@ -89,7 +89,7 @@ jobs:
 
       - name: Act - Run parse-ci-reports action
         id: parse-ci-reports
-        uses: ./actions/parse-ci-reports
+        uses: $/actions/parse-ci-reports
         with:
           report-paths: |
             test-reports/junit.xml

.github/workflows/__test-action-repository-owner-is-organization.yml

@@ -18,7 +18,7 @@ jobs:
 
       - name: Act - Run repository-owner-is-organization action
         id: repository-owner-is-organization
-        uses: ./actions/repository-owner-is-organization
+        uses: $/actions/repository-owner-is-organization
 
       - name: Assert - Check repository-owner-is-organization outputs
         uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0

.github/workflows/__test-action-slugify.yml

@@ -18,7 +18,7 @@ jobs:
 
       - name: Act - Run slugify action
         id: slugify
-        uses: ./actions/slugify
+        uses: $/actions/slugify
         with:
           value: test content
 

.github/workflows/__test-action-working-directory.yml

@@ -18,7 +18,7 @@ jobs:
 
       - name: Act - Resolve workspace root directory
         id: working-directory
-        uses: ./actions/working-directory
+        uses: $/actions/working-directory
         with:
           working-directory: .
 
@@ -46,7 +46,7 @@ jobs:
       - name: Act - Run outside-workspace path with enforcement enabled
         id: outside-workspace-disallowed
         continue-on-error: true
-        uses: ./actions/working-directory
+        uses: $/actions/working-directory
         with:
           working-directory: /tmp
           enforce-path-in-workspace: true
@@ -73,7 +73,7 @@ jobs:
 
       - name: Act - Run outside-workspace path with enforcement disabled
         id: outside-workspace-allowed
-        uses: ./actions/working-directory
+        uses: $/actions/working-directory
         with:
           working-directory: /tmp
           enforce-path-in-workspace: false

.github/workflows/linter.md

@@ -47,6 +47,30 @@ Executes:
 
 <!-- overview:end -->
 
+### Shared linting image
+
+Super-Linter runs in the [Hoverkraft image](https://github.com/hoverkraft-tech/docker-base-images/tree/main/images/super-linter).
+The image owns toolchain selection, Kubernetes schema defaults, and fallback
+commitlint rules. Use the same image release for local linting to share
+these defaults and the bundled linter versions.
+
+The local Dockerfile and workflow pin the same image release and SHA256 digest.
+Update both references together when updating the image: Dependabot updates Dockerfiles but
+[does not update `docker://` workflow references](https://github.com/dependabot/dependabot-core/issues/8362).
+
+Values in `linter-env` override the toolchain inputs and image defaults. An empty
+`VALIDATE_JAVASCRIPT_TOOLCHAIN` or `VALIDATE_PYTHON_TOOLCHAIN` value disables the
+corresponding automatic toolchain exclusions. `VALIDATE_GIT_COMMITLINT=false`
+disables commitlint. With toolchain selectors enabled, explicit `true` keeps it
+enabled without restricting the other validators. Set both selectors to empty
+strings to use Super-Linter's native `VALIDATE_*=true` allowlist, including
+commitlint. Do not mix `true` and `false` validator flags in that mode.
+
+CI uses Git change detection according to `lint-all` and publishes GitHub
+summaries. Local runs use filesystem discovery by default. The workflow also
+installs project dependencies when `package.json` declares Prettier plugins;
+install those dependencies before running the image locally.
+
 ### GitHub Actions Pinning
 
 **Tips:** To ensure that all GitHub Actions used in your workflows are pinned to a specific version,