fix(ci): run linters through mise

Signed-off-by: Yordis Prieto <yordis.prieto@gmail.com>

Author: yordis

.github/workflows/ci.yml

@@ -12,33 +12,19 @@ concurrency:
   cancel-in-progress: true
 
 jobs:
-  shell:
-    name: Shell
+  check:
+    name: Lint and test
     runs-on: ubuntu-latest
     permissions:
       contents: read
     steps:
-      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           persist-credentials: false
-      - name: shellcheck
-        run: git ls-files -z '*.sh' | xargs -0 shellcheck -x
-      - name: Run tests
-        run: |
-          while IFS= read -r suite; do
-            echo "==> $suite"
-            bash "$suite"
-          done < <(git ls-files 'tests/**/*_test.sh')
 
-  actionlint:
-    name: Actionlint
-    runs-on: ubuntu-latest
-    permissions:
-      contents: read
-    steps:
-      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
-        with:
-          persist-credentials: false
-      - uses: docker://rhysd/actionlint@sha256:887a259a5a534f3c4f36cb02dca341673c6089431057242cdc931e9f133147e9 # v1.7.7
-        with:
-          args: -color
+      # Tool versions live in mise.toml so a contributor running `mise run lint`
+      # locally gets exactly what CI runs.
+      - uses: jdx/mise-action@c2a87611a18de5b3828c5652fe268e992400cb5c # v4.3.0
+
+      - run: mise run lint
+      - run: mise run test

.github/workflows/semconv.yml

@@ -17,7 +17,7 @@ jobs:
       # Under pull_request_target this checks out the base ref, which is what
       # the local action reference below needs. Never point it at the pull
       # request head, and never add an install or build step to this job.
-      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           persist-credentials: false
       - uses: ./actions/semconv/pull-request

mise.toml

@@ -0,0 +1,14 @@
+[tools]
+actionlint = "1.7.12"
+shellcheck = "0.11.0"
+
+[tasks.lint]
+description = "Lint every shell script and workflow"
+run = [
+  "git ls-files -z '*.sh' | xargs -0 shellcheck -x",
+  "actionlint",
+]
+
+[tasks.test]
+description = "Run every test suite"
+run = "git ls-files 'tests/**/*_test.sh' | while IFS= read -r suite; do echo \"==> $suite\"; bash \"$suite\" || exit 1; done"