diff --git a/.github/workflows/linter.yml b/.github/workflows/linter.yml index 8b9eb42..7a1948c 100644 --- a/.github/workflows/linter.yml +++ b/.github/workflows/linter.yml @@ -3,6 +3,8 @@ name: Lint Code Base on: pull_request +permissions: read-all + jobs: build: name: Lint Code Base @@ -15,13 +17,16 @@ jobs: - name: Checkout Code uses: actions/checkout@v4 with: - # Full git history is needed to get a proper list - # of changed files within `super-linter` + # Full git history is needed to get a proper + # list of changed files within `super-linter` fetch-depth: 0 - name: Lint Code Base - uses: github/super-linter@v5 + uses: github/super-linter@v7 env: VALIDATE_ALL_CODEBASE: false + VALIDATE_MARKDOWN_PRETTIER: false + VALIDATE_YAML_PRETTIER: false DEFAULT_BRANCH: v1.x GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} + \ No newline at end of file diff --git a/.github/workflows/slugify-value.yaml b/.github/workflows/slugify-value.yaml index 8efa812..dabe6b5 100644 --- a/.github/workflows/slugify-value.yaml +++ b/.github/workflows/slugify-value.yaml @@ -5,6 +5,9 @@ on: branches: - v1.x pull_request: + +permissions: read-all + # Disable line length check due to the content of the tests # yamllint disable rule:line-length jobs: @@ -173,6 +176,11 @@ jobs: release: runs-on: ubuntu-latest + permissions: + contents: write + issues: write + id-token: write + packages: write concurrency: group: release-${{ github.ref }} needs: @@ -180,6 +188,8 @@ jobs: steps: - name: Checkout uses: actions/checkout@v4 + with: + persist-credentials: false # Release - name: Release this GitHub Action