Upgrade GitHub CI/CD Workflows to Current Stable Version

[aj-stein-nist]

User Story:

As an OSCAL tool developer, in order to make sure CI/CD is properly developed and integrated in relevant OSCAL projects, I want the current version of GitHub Actions CI/CD workflows updated to current stable.

Goals:

The NIST OSCAL Team will complete cleaning, deduplification, and misc improvements to the GitHub Actions in usnistgov/OSCAL for improved maintenance, stability, and resiliency.

Dependencies:

• Completion of Modularize All GitHub Actions Setups OSCAL#1223
• Converter Generators Do not Emit IDs for Fields in Certain Assembly Contexts metaschema#235
• Intermittent HTTP 429 errors from git push in CI/CD when auto-committing docs and converted content OSCAL#1698

Acceptance Criteria

• All readme documentation affected by the changes in this issue have been updated.
• A Pull Request (PR) is submitted that fully addresses the goals of this User Story. This issue is referenced in the PR.
• The CI-CD build process runs without any reported errors on the PR. This can be confirmed by reviewing that all checks have passed in the PR.

[aj-stein-nist]

Earlier in the week I spent I looked deeply into this and noticed that very little of the updated between the main OSCAL CI/CD and oscal-content because the different outcomes desired from the repository (oscal-content only converts content). If anything, this means maybe only the steps for setting up Java and Saxon and/or Calabash matter here. That means at this point simple copy-paste.

I did some experiment with cleanup of this and had a think, or quick diversionary spike to think of how we can finish the modularization here better than copy-pasting, and that would mean beginning the move to reusable workflows. The alternative, composite actions, are not able to access tokens, so flat out could not commit back content (this is a very important stumbling block and the final step in pipeline processing for this repo). So here are the spike experiments.

https://github.com/aj-stein-nist/test-gha-reusable-workflows/tree/main/.github/workflows

I am worried because of token management from forks and other things from testing this likely will not work particularly well is token management around this committing documents issue. Tokens are determined in the checkout step, in the default action provided by the GHA team. I am struggling to get around actions/checkout#298 which means this spike might be wrapping up with a "meh, this is not going to work either" result.

[aj-stein-nist]

Ok, #1470 created to tie off the spike work and return back to the AC here of just upgrading things to a stable version. New PR incoming.

[aj-stein-nist]

@david-waltermire-nist I will also wrap this up for current sprint post-haste. We had discussed in last weekly status meeting that I fix this this up and defer other work, I started working in it and will finish soon, but I did forget to add it to the current sprint. Apologies! Will ping you again when it is ready for review.