hermes-agent/.github/workflows
ethernet 1ac56f2c6f fix(ci): hadolint needs a docker daemon — move it back off the small runner
hadolint/hadolint-action declares `runs: using: docker`, so the runner
builds and runs it as a container. Routing it to arc-runner-small (no dind)
failed the job at "Build hadolint/hadolint-action", before checkout.

The audit that produced the earlier routing grepped job bodies for docker
commands, which can't see this: nothing in the YAML says "docker" — the
dependency is in the action's own metadata. The right check is each step's
`runs.using`.

Swept every job on the dind-less sets (arc-runner-set, arc-runner-small)
against the `runs.using` of every action it invokes: hadolint was the only
`using: docker` action. shellcheck is composite, everything else is node24.
2026-07-31 14:22:16 -04:00
..
ci.yml feat(ci): sparse checkout in 'detect-changes' to speed up ci 2026-07-31 14:15:26 -04:00
contributor-check.yml feat(ci): migrate all workflows to GKE self-hosted runners 2026-07-31 14:15:25 -04:00
deploy-site.yml fix(ci): review fixes — PR-read-only buildx cache, per-arch profile labels 2026-07-31 14:15:26 -04:00
docker-lint.yml fix(ci): hadolint needs a docker daemon — move it back off the small runner 2026-07-31 14:22:16 -04:00
docker.yml perf(ci): route jobs to the new capability-split runner scale sets 2026-07-31 14:15:26 -04:00
docs-site-checks.yml fix(ci): review fixes — PR-read-only buildx cache, per-arch profile labels 2026-07-31 14:15:26 -04:00
e2e-desktop.yml perf(ci): drop per-job ripgrep/uv/Python setup, use the baked runner image 2026-07-31 14:15:26 -04:00
history-check.yml perf(ci): route jobs to the new capability-split runner scale sets 2026-07-31 14:15:26 -04:00
infographic-check.yml perf(ci): route jobs to the new capability-split runner scale sets 2026-07-31 14:15:26 -04:00
js-autofix.yml fix(ci): review fixes — PR-read-only buildx cache, per-arch profile labels 2026-07-31 14:15:26 -04:00
js-tests.yml feat(ci): speed up npm worktree list 2026-07-31 14:15:26 -04:00
label-rerun.yml feat(ci): migrate all workflows to GKE self-hosted runners 2026-07-31 14:15:25 -04:00
lint.yml perf(ci): drop per-job ripgrep/uv/Python setup, use the baked runner image 2026-07-31 14:15:26 -04:00
lockfile-diff.yml feat(ci): migrate all workflows to GKE self-hosted runners 2026-07-31 14:15:25 -04:00
osv-scanner.yml perf(ci): route jobs to the new capability-split runner scale sets 2026-07-31 14:15:26 -04:00
publish-e2e-evidence.yml feat(ci): migrate all workflows to GKE self-hosted runners 2026-07-31 14:15:25 -04:00
review-labels.yml perf(ci): route jobs to the new capability-split runner scale sets 2026-07-31 14:15:26 -04:00
skills-index-freshness.yml feat(ci): migrate all workflows to GKE self-hosted runners 2026-07-31 14:15:25 -04:00
skills-index.yml feat(ci): migrate all workflows to GKE self-hosted runners 2026-07-31 14:15:25 -04:00
supply-chain-audit.yml feat(ci): migrate all workflows to GKE self-hosted runners 2026-07-31 14:15:25 -04:00
tests.yml perf(ci): sparse+blobless checkout for the test-slice generate job 2026-07-31 14:15:26 -04:00
uv-lockfile-check.yml perf(ci): drop per-job ripgrep/uv/Python setup, use the baked runner image 2026-07-31 14:15:26 -04:00