feat: refactor pipelines into reusable workflows

This change refactors the build, test, and benchmarking pipelines to a
`presubmit` and `trunk` parent workflow which invokes other reusable
workflows. This simplifies the deluge of pipelines that are executed,
allowing for better orchestration and reduced noise on failures (only
one email will be sent instead of several).

Closes: #1198
Change-Id: I52407c39366bb9fbfd8fc1455a4f4a1d94f04897

Author: sudoforge

.github/workflows/benchmark.yml

@@ -1,29 +1,17 @@
-name: Go build and test
+name: build-and-test
 
 on:
-  push:
-    branches: [ master ]
-  pull_request:
-    branches: [ master ]
-  workflow_dispatch:
-
-concurrency:
-  group: go-${{ github.ref }}
-  cancel-in-progress: true
+  workflow_call:
 
 jobs:
-  build:
-
+  with-go:
     strategy:
       matrix:
         go-version: [1.22.5]
         platform: [ubuntu-latest, macos-latest, windows-latest]
-
     runs-on: ${{ matrix.platform }}
-
     steps:
-
-      - name: Set up Go ${{ matrix.node-version }}
+      - name: Set up Go ${{ matrix.go-version }}
         uses: actions/setup-go@v5
         with:
           go-version: ${{ matrix.go-version }}
@@ -43,17 +31,29 @@ jobs:
           GITHUB_TOKEN_PUBLIC: ${{ secrets._GITHUB_TOKEN_PUBLIC }}
           GITLAB_API_TOKEN: ${{ secrets.GITLAB_API_TOKEN }}
           GITLAB_PROJECT_ID: ${{ secrets.GITLAB_PROJECT_ID }}
-  
-  lint:
+
+  with-node:
     runs-on: ubuntu-latest
+    strategy:
+      matrix:
+        node-version: [12.x, 14.x, 16.x]
+    defaults:
+      run:
+        working-directory: webui
     steps:
-      - name: Install Go
-        uses: actions/setup-go@v5
+      - name: Setup Node.js ${{ matrix.node-version }}
+        uses: actions/setup-node@v4
         with:
-          go-version: 1.19.4
+          node-version: ${{ matrix.node-version }}
 
-      - name: Checkout code
+      - name: Check out code
         uses: actions/checkout@v4
 
-      - name: Check Code Formatting
-        run: find . -name "*.go" | while read line; do [ -z "$(gofmt -d "$line" | head)" ] || exit 1; done
+      - name: Install
+        run: make install
+
+      - name: Build
+        run: make build
+
+      - name: Test
+        run: make test

.github/workflows/go.yml renamed to .github/workflows/build-and-test.yml

@@ -0,0 +1,74 @@
+name: lint
+
+on:
+  workflow_call:
+
+jobs:
+  filter:
+    name: filter
+    runs-on: ubuntu-latest
+    outputs:
+      golang: ${{ steps.filter.outputs.golang }}
+      golang_files: ${{ steps.filter.outputs.golang_files }}
+    steps:
+      - uses: actions/checkout@v4
+      - uses: dorny/paths-filter@v3
+        id: filter
+        with:
+          list-files: shell
+          filters: |
+            golang:
+              - added|modified: '**/*.go'
+              - added|modified: '/go.sum'
+              - added|modified: '/go.mod'
+
+  codeql:
+    runs-on: ubuntu-latest
+    steps:
+    - name: Checkout repository
+      uses: actions/checkout@v4
+      with:
+        # We must fetch at least the immediate parents so that if this is
+        # a pull request then we can checkout the head.
+        fetch-depth: 2
+
+    - run: git checkout HEAD^2
+      if: ${{ github.event_name == 'pull_request' }}
+
+    - name: Initialize CodeQL
+      uses: github/codeql-action/init@v3
+      with:
+        languages: go, javascript
+
+    - name: Autobuild
+      uses: github/codeql-action/autobuild@v3
+
+    - name: Perform CodeQL Analysis
+      uses: github/codeql-action/analyze@v3
+
+  spelling:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Check spelling
+        uses: codespell-project/actions-codespell@v2
+
+  go:
+    runs-on: ubuntu-latest
+    needs:
+      - filter
+    if: needs.filter.outputs.golang == 'true'
+    steps:
+      - name: Install Go
+        uses: actions/setup-go@v5
+        with:
+          go-version: 1.22.5
+
+      - name: Checkout code
+        uses: actions/checkout@v4
+
+      - name: Check Code Formatting
+        run: |
+          test -z "$(gofmt -d ${{ needs.filter.outputs.golang_files }})" || exit 1

.github/workflows/codeql-analysis.yml

@@ -0,0 +1,25 @@
+# //.github/workflows:presubmit.yml
+#
+# This file exists to define the steps executed for a push to each tree matching
+# the pattern `refs/heads/*`, excluding the default ref. For configuring the
+# steps that occur after a push to the trunk branch, see
+# `//.github/workflows:trunk.yml`.
+---
+name: presubmit
+
+on:
+  push:
+    branches-ignore:
+      - master
+
+concurrency:
+  group: ${{ github.ref }}
+  cancel-in-progress: true
+
+jobs:
+  lint:
+    uses: ./.github/workflows/lint.yml
+
+  build-and-test:
+    uses: ./.github/workflows/build-and-test.yml
+    secrets: inherit

.github/workflows/codespell.yml

@@ -1,7 +1,6 @@
 name: Build release binaries
 
 on:
-  workflow_dispatch:
   push:
     tags:
       - "v*"
@@ -13,7 +12,6 @@ concurrency:
 jobs:
   build-release:
     runs-on: "ubuntu-latest"
-
     steps:
       - name: Set up Go
         uses: actions/setup-go@v5