chore: yaml cleanups

.github/workflows/bazel.ci.yml

@@ -1,7 +1,8 @@
+---
 name: Bazel CI
 
 # Controls when the action will run.
-on:
+"on":
   push:
     branches: [main]
   pull_request:

.github/workflows/check.buildifier.yml

@@ -1,7 +1,8 @@
+---
 name: Buildifier
 
 # Controls when the action will run.
-on:
+"on":
   # Triggers the workflow on push or pull request events but only for the main branch
   push:
     branches: [main]

.github/workflows/check.lint-yaml.yml

@@ -43,7 +43,7 @@ jobs:
   ## Task: Lint Bazel Central Registry config files
   lint-bcr-yaml:
     name: "Lint: BCR"
-    runs-on: ${{ vars.RUNNER || 'ubuntu-latest' }}
+    runs-on: ubuntu-latest
     permissions:
       contents: "read"
       id-token: "write"
@@ -67,7 +67,7 @@ jobs:
   ## Task: Lint Bazel CI config files
   lint-bazelci-yaml:
     name: "Lint: Bazel CI"
-    runs-on: ${{ vars.RUNNER || 'ubuntu-latest' }}
+    runs-on: ubuntu-latest
     permissions:
       contents: "read"
       id-token: "write"

.github/workflows/check.scorecards.yml

@@ -1,9 +1,10 @@
+---
 # This workflow uses actions that are not certified by GitHub. They are provided
 # by a third-party and are governed by separate terms of service, privacy
 # policy, and support documentation.
 
-name: Scorecard supply-chain security
-on:
+name: Scorecard
+"on":
   # For Branch-Protection check. Only the default branch is supported. See
   # https://github.com/ossf/scorecard/blob/main/docs/checks.md#branch-protection
   branch_protection_rule:

.github/workflows/module.build.yml

@@ -1,6 +1,7 @@
+---
 name: "Build"
 
-on:
+"on":
   workflow_dispatch:
     inputs:
       ## Runner to use

.github/workflows/module.test.yml

@@ -1,6 +1,7 @@
+---
 name: "Test"
 
-on:
+"on":
   workflow_dispatch:
     inputs:
       ## Runner to use

.github/workflows/on.pr.yml

@@ -1,7 +1,10 @@
+---
 name: "PR"
 
-on:
-  pull_request: {}
+"on":
+  pull_request:
+    branches:
+      - main
 
 jobs:
   test:

.github/workflows/on.push.yml

@@ -1,6 +1,7 @@
+---
 name: "CI"
 
-on:
+"on":
   push:
     branches:
       - main

.github/workflows/on.release.yml

@@ -1,6 +1,7 @@
+---
 name: Release
 
-on:
+"on":
   push:
     tags:
       - "v*.*.*"

.prettierignore

@@ -2,4 +2,4 @@ bazel-*
 external
 node_modules
 pnpm-lock.yaml
-maven-install.json
+maven_install.json