ci: Automatically committing/suggesting linter fixes for PRs

[metabiswadeep]

Fixes #2925

[codecov-commenter]

Codecov Report

Merging #3017 (0d7156d) into main (8ac34cf) will decrease coverage by 2.79%.
The diff coverage is n/a.

@@            Coverage Diff             @@
##             main    #3017      +/-   ##
==========================================
- Coverage   82.93%   80.15%   -2.79%     
==========================================
  Files         684      712      +28     
  Lines       10704    10842     +138     
  Branches     1430     1258     -172     
==========================================
- Hits         8877     8690     -187     
- Misses       1460     1769     +309     
- Partials      367      383      +16     

Flag	Coverage Δ
longtests	?
win-longtests	80.15% <ø> (-0.33%)	⬇️

Flags with carried forward coverage won't be shown. Click here to find out more.

see 68 files with indirect coverage changes

📣 We’re building smart automated test selection to slash your CI/CD build times. Learn more

[terriko]

Looks pretty good, just some minor changes requested to make sure this doesn't come up in the regular OSSF Scorecard scans next week.

[terriko]

Can you update this line to use the git hash the way we did with the other workflows? (It was a recommendation as part of our OpenSSF scorecard efforts)

Example:
https://github.com/intel/cve-bin-tool/blob/main/.github/workflows/update-pre-commit.yml#L29

      - uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab # v3.5.2

[terriko]

Thank you!