ci: changing ubuntu-latest to ubuntu-22.04

.github/workflows/ansible-lint.yml

@@ -12,7 +12,7 @@ permissions:
 jobs:
   build:
     name: 'Ansible Lint'
-    runs-on: 'ubuntu-latest'
+    runs-on: 'ubuntu-22.04'
     permissions:
       contents: 'read'
     steps:

.github/workflows/commitlint.yml

@@ -9,7 +9,7 @@ permissions:
 
 jobs:
   commitlint:
-    runs-on: 'ubuntu-latest'
+    runs-on: 'ubuntu-22.04'
     permissions:
       contents: 'read'
     steps:

.github/workflows/dependency_review.yml

@@ -11,7 +11,7 @@ permissions:
 jobs:
   dependency-review:
     name: 'Dependency Review'
-    runs-on: 'ubuntu-latest'
+    runs-on: 'ubuntu-22.04'
     permissions:
       contents: 'read'
       pull-requests: 'write'

.github/workflows/github_pages.yml

@@ -17,7 +17,7 @@ permissions:
 jobs:
   build_and_deploy:
     name: 'Build and deploy documentation to GitHub Pages'
-    runs-on: 'ubuntu-latest'
+    runs-on: 'ubuntu-22.04'
     permissions:
       contents: 'write'
       deployments: 'write'

.github/workflows/gitleaks.yml

@@ -13,7 +13,7 @@ permissions:
 jobs:
   gitleaks:
     name: 'gitleaks'
-    runs-on: 'ubuntu-latest'
+    runs-on: 'ubuntu-22.04'
     permissions:
       contents: 'read'
     steps:

.github/workflows/kics.yml

@@ -14,7 +14,7 @@ permissions: 'read-all'
 jobs:
   analysis:
     name: 'KICS analysis'
-    runs-on: 'ubuntu-latest'
+    runs-on: 'ubuntu-22.04'
     permissions:
       # Needed to upload the results to code-scanning dashboard.
       security-events: 'write'

.github/workflows/markdown-link-check.yml

@@ -12,7 +12,7 @@ permissions:
 jobs:
   build:
     name: 'markdown-link-check'
-    runs-on: 'ubuntu-latest'
+    runs-on: 'ubuntu-22.04'
     permissions:
       contents: 'read'
     steps:

.github/workflows/markdownlint.yml

@@ -12,7 +12,7 @@ permissions:
 jobs:
   build:
     name: 'markdownlint'
-    runs-on: 'ubuntu-latest'
+    runs-on: 'ubuntu-22.04'
     permissions:
       contents: 'read'
     steps:

.github/workflows/molecule_certified_ees.yml

@@ -62,7 +62,7 @@ jobs:
     if: >-
       contains(github.event.pull_request.labels.*.name, 'run') ||
       github.ref == 'refs/heads/main'
-    runs-on: 'ubuntu-latest'
+    runs-on: 'ubuntu-22.04'
     permissions:
       contents: 'read'
     outputs:
@@ -95,7 +95,7 @@ jobs:
     if: >-
       contains(github.event.pull_request.labels.*.name, 'run') ||
       github.ref == 'refs/heads/main'
-    runs-on: 'ubuntu-latest'
+    runs-on: 'ubuntu-22.04'
     permissions:
       contents: 'read'
     outputs:

.github/workflows/molecule_community_ees.yml

@@ -42,7 +42,7 @@ permissions:
 
 jobs:
   molecule-community-ees:
-    runs-on: 'ubuntu-latest'
+    runs-on: 'ubuntu-22.04'
     permissions:
       contents: 'read'
     container:

.github/workflows/pre-commit.yml

@@ -44,7 +44,7 @@ jobs:
   pre-commit:
     permissions:
       contents: 'write'
-    runs-on: 'ubuntu-latest'
+    runs-on: 'ubuntu-22.04'
     steps:
       - name: 'Harden Runner'
         uses: 'step-security/harden-runner@0d381219ddf674d61a7572ddd19d7941e271515c' # v2.9.0

.github/workflows/purge_caches.yml

@@ -22,7 +22,7 @@ permissions:
 jobs:
   purge-caches:
     name: 'Purge caches'
-    runs-on: 'ubuntu-latest'
+    runs-on: 'ubuntu-22.04'
     permissions:
       actions: 'write'
     steps:

.github/workflows/pyspelling.yml

@@ -12,7 +12,7 @@ permissions:
 jobs:
   pyspelling:
     name: 'pyspelling'
-    runs-on: 'ubuntu-latest'
+    runs-on: 'ubuntu-22.04'
     permissions:
       contents: 'read'
     steps:

.github/workflows/release.yml

@@ -12,7 +12,7 @@ permissions:
 jobs:
   check-secrets:
     name: 'Check if required secrets are available'
-    runs-on: 'ubuntu-latest'
+    runs-on: 'ubuntu-22.04'
     permissions:
       contents: 'read'
     outputs:
@@ -43,7 +43,7 @@ jobs:
     name: 'Publish to Ansible Galaxy'
     if: "needs.check-secrets.outputs.secrets-defined == 'true'"
     needs: 'check-secrets'
-    runs-on: 'ubuntu-latest'
+    runs-on: 'ubuntu-22.04'
     permissions:
       contents: 'write'
       issues: 'write'

.github/workflows/remove_labels.yml

@@ -13,7 +13,7 @@ permissions:
 jobs:
   remove-label:
     name: 'Remove run label on pull request synchronize'
-    runs-on: 'ubuntu-latest'
+    runs-on: 'ubuntu-22.04'
     if: "github.base_ref == 'main'"
     permissions:
       pull-requests: 'write'

.github/workflows/renovate.yml

@@ -58,7 +58,7 @@ env:
 jobs:
   check-secrets:
     name: 'Check if required secrets are available'
-    runs-on: 'ubuntu-latest'
+    runs-on: 'ubuntu-22.04'
     permissions:
       contents: 'read'
     outputs:
@@ -90,7 +90,7 @@ jobs:
     name: 'Validate renovate configuration'
     if: "needs.check-secrets.outputs.secrets-defined == 'true'"
     needs: 'check-secrets'
-    runs-on: 'ubuntu-latest'
+    runs-on: 'ubuntu-22.04'
     permissions:
       contents: 'read'
     steps:
@@ -123,7 +123,7 @@ jobs:
           npx --yes --package renovate -- renovate-config-validator --strict || exit 1
 
   check-user-permissions:
-    runs-on: 'ubuntu-latest'
+    runs-on: 'ubuntu-22.04'
     permissions:
       contents: 'read'
     needs: 'validate-config'
@@ -155,7 +155,7 @@ jobs:
           echo "Job originally triggered by ${{ github.actor }}"
 
   renovate:
-    runs-on: 'ubuntu-latest'
+    runs-on: 'ubuntu-22.04'
     needs: 'check-user-permissions'
     if: "needs.check-user-permissions.outputs.require-result == 'true'"
     permissions:

.github/workflows/scorecard.yml

@@ -19,7 +19,7 @@ permissions: 'read-all'
 jobs:
   check-secrets:
     name: 'Check if required secrets are available'
-    runs-on: 'ubuntu-latest'
+    runs-on: 'ubuntu-22.04'
     permissions:
       contents: 'read'
     outputs:
@@ -47,7 +47,7 @@ jobs:
     name: 'Scorecard analysis'
     if: "needs.check-secrets.outputs.secrets-defined == 'true'"
     needs: 'check-secrets'
-    runs-on: 'ubuntu-latest'
+    runs-on: 'ubuntu-22.04'
     permissions:
       # Needed to upload the results to code-scanning dashboard.
       security-events: 'write'

.github/workflows/wf_call_molecule_certified_ees.yml

@@ -31,7 +31,7 @@ env:
 
 jobs:
   check-user-permissions:
-    runs-on: 'ubuntu-latest'
+    runs-on: 'ubuntu-22.04'
     permissions:
       contents: 'read'
     outputs:
@@ -62,7 +62,7 @@ jobs:
           echo "Job originally triggered by ${{ github.actor }}"
 
   molecule-certified-ees:
-    runs-on: 'ubuntu-latest'
+    runs-on: 'ubuntu-22.04'
     needs: 'check-user-permissions'
     if: "needs.check-user-permissions.outputs.require-result == 'true'"
     permissions: