ci: name every job after what it does

The checks list on a PR was a wall of internal job ids. 'test (3.10)' says a
job ran, not what it checked; 'publish_code' and 'tag_commit' are identifiers
that were never meant to be read by a human deciding whether a PR is safe to
merge.

  test                      -> run test suite on python 3.10
  publish_code              -> publish package and docker images
  tag_commit                -> tag the release commit
  publish_docs              -> publish the docs site
  test-distros              -> install and smoke-test on fedora
  analyze                   -> scan python for security issues
  benchmark                 -> compare performance against the base branch
  cla                       -> check the CLA is signed
  update_docs               -> regenerate the docs and open a PR
  update-nuclei-version     -> open a PR when a new nuclei is released
  update-trufflehog-version -> open a PR when a new trufflehog is released

Names only, no behavior change.

Note this renames the status check contexts. The branch ruleset on dev still
requires the old names, so it needs updating in the same window or required
checks will sit pending forever.

Author: singlerider

.github/workflows/benchmark.yml

@@ -17,6 +17,7 @@ permissions:
 
 jobs:
   benchmark:
+    name: compare performance against the base branch
     runs-on: ubuntu-latest
 
     steps:

.github/workflows/cla.yml

@@ -11,5 +11,6 @@ permissions:
 
 jobs:
   cla:
+    name: check the CLA is signed
     uses: blacklanternsecurity/CLA/.github/workflows/cla-reusable.yml@main
     secrets: inherit

.github/workflows/codeql.yml

@@ -21,7 +21,7 @@ on:
 
 jobs:
   analyze:
-    name: Analyze (${{ matrix.language }})
+    name: scan ${{ matrix.language }} for security issues
     # Runner size impacts CodeQL analysis time. To learn more, please see:
     #   - https://gh.io/recommended-hardware-resources-for-running-codeql
     #   - https://gh.io/supported-runners-and-hardware-resources

.github/workflows/distro_tests.yml

@@ -8,6 +8,7 @@ concurrency:
 
 jobs:
   test-distros:
+    name: install and smoke-test on ${{ matrix.os }}
     runs-on: ubuntu-latest
     container:
       image: ${{ matrix.os }}

.github/workflows/docs_updater.yml

@@ -7,6 +7,7 @@ on:
 
 jobs:
   update_docs:
+    name: regenerate the docs and open a PR
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v7

.github/workflows/tests.yml

@@ -12,6 +12,7 @@ concurrency:
 
 jobs:
   test:
+    name: run test suite on python ${{ matrix.python-version }}
     runs-on: ubuntu-latest
     strategy:
       # if one python version fails, let the others finish
@@ -52,6 +53,7 @@ jobs:
           files: ./cov.xml
           verbose: true
   publish_code:
+    name: publish package and docker images
     needs: test
     runs-on: ubuntu-latest
     if: github.event_name == 'push' && (github.ref == 'refs/heads/dev' || github.ref == 'refs/heads/stable')
@@ -200,6 +202,7 @@ jobs:
     outputs:
       BBOT_VERSION: ${{ steps.version.outputs.BBOT_VERSION }}
   tag_commit:
+    name: tag the release commit
     needs: publish_code
     runs-on: ubuntu-latest
     if: github.event_name == 'push' && (github.ref == 'refs/heads/stable' || github.ref == 'refs/heads/dev')
@@ -222,6 +225,7 @@ jobs:
           git push origin "$VERSION"
 
   publish_docs:
+    name: publish the docs site
     runs-on: ubuntu-latest
     if: github.event_name == 'push' && (github.ref == 'refs/heads/stable' || github.ref == 'refs/heads/dev')
     steps:

.github/workflows/version_updater.yml

@@ -7,6 +7,7 @@ on:
 
 jobs:
   update-nuclei-version:
+    name: open a PR when a new nuclei is released
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v7
@@ -59,6 +60,7 @@ jobs:
           author: blsaccess <info@blacklanternsecurity.com>
           assignees: "TheTechromancer"
   update-trufflehog-version:
+    name: open a PR when a new trufflehog is released
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v7