Merge pull request #1856 from alphagov/theseanything/use-resuable-workflows

Use reusable workflows for pinned check and trello poster

Author: theseanything

.github/workflows/require-pinned-github-actions.yml

@@ -8,12 +8,4 @@ on:
 jobs:
   check-actions-sha:
     name: Check actions are pinned to SHAs
-    runs-on: ubuntu-24.04-arm
-    steps:
-      - name: Checkout code
-        uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
-      - name: Ensure SHA pinned actions
-        uses: zgosalvez/github-actions-ensure-sha-pinned-actions@6124774845927d14c601359ab8138699fa5b70c3 # v4.0.1
-        with:
-          allowlist: |
-            alphagov/forms-deploy
+    uses: alphagov/forms-deploy/.github/workflows/require-pinned-github-actions.yml@main

.github/workflows/trello_poster.yml

@@ -4,11 +4,7 @@ on:
     types: [opened, edited]
 jobs:
   trello-poster:
-    runs-on: ubuntu-latest
-    steps:
-      - uses: lfdebrux/trello-poster-action@736f8f21f0cacf6f4142d5c9e09ebd4439e83318 # v1.2.0
-        with:
-          comment-body: ${{ github.event.pull_request.body }}
-          github-url: ${{ github.event.pull_request.html_url }}
-          trello-api-token: ${{ secrets.TRELLO_API_TOKEN }}
-          trello-api-key: ${{ secrets.TRELLO_API_KEY }}
+    uses: alphagov/forms-deploy/.github/workflows/trello-poster.yml@main
+    secrets:
+      TRELLO_API_TOKEN: ${{ secrets.TRELLO_API_TOKEN }}
+      TRELLO_API_KEY: ${{ secrets.TRELLO_API_KEY }}