From 63a2ec32daeea32fb72201a4a9dc5c02ae2aa54d Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Sun, 27 Oct 2024 01:14:41 +0200
Subject: [PATCH] build(deps): bump github/super-linter from 5 to 7 in the
 dependencies group across 1 directory (#26)

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Romain Lespinasse <romain.lespinasse@gmail.com>
---
 .github/workflows/linter.yml                 | 11 ++++++++---
 .github/workflows/shortify-git-revision.yaml | 20 ++++++++++++++------
 2 files changed, 22 insertions(+), 9 deletions(-)

diff --git a/.github/workflows/linter.yml b/.github/workflows/linter.yml
index be81bb3..7a1948c 100644
--- a/.github/workflows/linter.yml
+++ b/.github/workflows/linter.yml
@@ -3,6 +3,8 @@ name: Lint Code Base
 
 on: pull_request
 
+permissions: read-all
+
 jobs:
   build:
     name: Lint Code Base
@@ -15,13 +17,16 @@ jobs:
       - name: Checkout Code
         uses: actions/checkout@v4
         with:
-          # Full git history is needed to get a proper list of changed files within `super-linter`
+          # Full git history is needed to get a proper
+          # list of changed files within `super-linter`
           fetch-depth: 0
 
       - name: Lint Code Base
-        uses: github/super-linter@v5
+        uses: github/super-linter@v7
         env:
           VALIDATE_ALL_CODEBASE: false
+          VALIDATE_MARKDOWN_PRETTIER: false
+          VALIDATE_YAML_PRETTIER: false
           DEFAULT_BRANCH: v1.x
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-          
\ No newline at end of file
+  
\ No newline at end of file
diff --git a/.github/workflows/shortify-git-revision.yaml b/.github/workflows/shortify-git-revision.yaml
index 17e4c70..636b0ec 100644
--- a/.github/workflows/shortify-git-revision.yaml
+++ b/.github/workflows/shortify-git-revision.yaml
@@ -1,9 +1,11 @@
+---
 name: Shortify Git Revision
 on:
   push:
     branches:
       - v1.x
   pull_request:
+permissions: read-all
 jobs:
   os-testing:
     strategy:
@@ -200,19 +202,25 @@ jobs:
           [[ "${{ env.ROOT_COMMIT_SHORT }}" == "${{ steps.short-on-error.outputs.short }}" ]]
         shell: bash
 
+
   release:
     runs-on: ubuntu-latest
-    concurrency:
-      group: release-${{ github.ref }}
     needs:
       - os-testing
       - error-os-testing
+    permissions:
+      contents: write
+      issues: write
+      id-token: write
+      packages: write
+    concurrency:
+      group: release-${{ github.ref }}
     steps:
-      - name: Checkout
-        uses: actions/checkout@v4
+      - uses: actions/checkout@v4
+        with:
+          persist-credentials: false
 
-      # Release
-      - name: Release this GitHub Action
+      - name: Release That
         uses: rlespinasse/release-that@v1
         with:
           github-token: ${{ secrets.GH_TOKEN }}