build(deps): bump github/super-linter from 5 to 7 in the dependencies…

… group across 1 directory (#26) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Romain Lespinasse <romain.lespinasse@gmail.com>
rlespinasse · Oct 26, 2024 · 63a2ec3 · 63a2ec3
1 parent 27d97cb
commit 63a2ec3
Show file tree

Hide file tree

Showing 2 changed files with 22 additions and 9 deletions.
diff --git a/.github/workflows/linter.yml b/.github/workflows/linter.yml
@@ -3,6 +3,8 @@ name: Lint Code Base
 
 on: pull_request
 
+permissions: read-all
+
 jobs:
   build:
     name: Lint Code Base
@@ -15,13 +17,16 @@ jobs:
       - name: Checkout Code
         uses: actions/checkout@v4
         with:
-          # Full git history is needed to get a proper list of changed files within `super-linter`
+          # Full git history is needed to get a proper
+          # list of changed files within `super-linter`
           fetch-depth: 0
 
       - name: Lint Code Base
-        uses: github/super-linter@v5
+        uses: github/super-linter@v7
         env:
           VALIDATE_ALL_CODEBASE: false
+          VALIDATE_MARKDOWN_PRETTIER: false
+          VALIDATE_YAML_PRETTIER: false
           DEFAULT_BRANCH: v1.x
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-          
+
diff --git a/.github/workflows/shortify-git-revision.yaml b/.github/workflows/shortify-git-revision.yaml
@@ -1,9 +1,11 @@
+---
 name: Shortify Git Revision
 on:
   push:
     branches:
       - v1.x
   pull_request:
+permissions: read-all
 jobs:
   os-testing:
     strategy:
@@ -200,19 +202,25 @@ jobs:
           [[ "${{ env.ROOT_COMMIT_SHORT }}" == "${{ steps.short-on-error.outputs.short }}" ]]
         shell: bash
 
+
   release:
     runs-on: ubuntu-latest
-    concurrency:
-      group: release-${{ github.ref }}
     needs:
       - os-testing
       - error-os-testing
+    permissions:
+      contents: write
+      issues: write
+      id-token: write
+      packages: write
+    concurrency:
+      group: release-${{ github.ref }}
     steps:
-      - name: Checkout
-        uses: actions/checkout@v4
+      - uses: actions/checkout@v4
+        with:
+          persist-credentials: false
 
-      # Release
-      - name: Release this GitHub Action
+      - name: Release That
         uses: rlespinasse/release-that@v1
         with:
           github-token: ${{ secrets.GH_TOKEN }}