A few workflow cleanups (#44358)

.github/workflows/content-changes-table-comment.yml

@@ -25,6 +25,9 @@ jobs:
     outputs:
       filterContentDir: ${{ steps.filter.outputs.filterContentDir }}
     steps:
+      - name: Check out repo
+        uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4.0.0
+
       - name: Get files changed
         uses: dorny/paths-filter@4512585405083f25c027a35db413c2b3b9006d50
         id: filter

.github/workflows/purge-old-deployment-environments.yml

@@ -15,6 +15,15 @@ on:
 permissions:
   contents: write
 
+# **IMPORTANT:** Do not change the FREEZE environment variable set here!
+# This workflow runs on a recurring basis. To temporarily disable it (e.g.,
+# during a docs deployment freeze), add an Actions Secret to the repo settings
+# called `FREEZE` with a value of `true`. To re-enable Audit Logs updates, simply
+# delete that Secret from the repo settings. The environment variable here
+# will duplicate that Secret's value for later evaluation.
+env:
+  FREEZE: ${{ secrets.FREEZE }}
+
 jobs:
   purge-old-deployment-environments:
     if: ${{ github.repository == 'github/docs-internal' || github.repository == 'github/docs' }}

.github/workflows/purge-old-workflow-runs.yml

@@ -12,6 +12,15 @@ on:
 permissions:
   contents: write
 
+# **IMPORTANT:** Do not change the FREEZE environment variable set here!
+# This workflow runs on a recurring basis. To temporarily disable it (e.g.,
+# during a docs deployment freeze), add an Actions Secret to the repo settings
+# called `FREEZE` with a value of `true`. To re-enable Audit Logs updates, simply
+# delete that Secret from the repo settings. The environment variable here
+# will duplicate that Secret's value for later evaluation.
+env:
+  FREEZE: ${{ secrets.FREEZE }}
+
 jobs:
   purge-old-workflow-runs:
     if: ${{ github.repository == 'github/docs-internal' || github.repository == 'github/docs' }}

.github/workflows/repo-freeze-check.yml

@@ -29,6 +29,9 @@ jobs:
     name: Prevent merging during deployment freezes
     runs-on: ubuntu-latest
     steps:
+      - name: Check out repo
+        uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4.0.0
+
       - name: Fail if repo merges are paused
         if: ${{ env.FREEZE == 'true' && github.head_ref != 'repo-sync' }}
         run: |

.github/workflows/sync-search-elasticsearch.yml

@@ -34,7 +34,7 @@ concurrency:
 env:
   FREEZE: ${{ secrets.FREEZE }}
   ELASTICSEARCH_URL: ${{ secrets.ELASTICSEARCH_URL }}
-  # Since we'll run in NDOE_ENV=production, we need to be explicit that
+  # Since we'll run in NODE_ENV=production, we need to be explicit that
   # we don't want Hydro configured.
   HYDRO_ENDPOINT: ''
   HYDRO_SECRET: ''