Update CI/CD

.github/workflows/codeql-analysis.yml

@@ -25,7 +25,7 @@ on:  # yamllint disable-line rule:truthy
 jobs:
   analyze:
     name: Analyze
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
 
     steps:
       - name: Checkout repository

.github/workflows/flake8.yml

@@ -17,7 +17,7 @@ on:  # yamllint disable-line rule:truthy
 
 jobs:
   build:
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
 
     steps:
       - uses: actions/checkout@v2

.github/workflows/gitguardian-scan.yml

@@ -8,7 +8,7 @@ on:  # yamllint disable-line rule:truthy
 jobs:
   scanning:
     name: GitGuardian scan
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     steps:
       - name: Checkout
         uses: actions/checkout@v2

.github/workflows/trivy.yml

@@ -16,7 +16,7 @@ on:  # yamllint disable-line rule:truthy
 
 jobs:
   container-analysis:
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     steps:
       - uses: actions/checkout@v2
 

.github/workflows/yaml-lint.yml

@@ -1,20 +1,31 @@
 ---
-name: Yaml Lint
-on:  # yamllint disable-line rule:truthy
+name: Super Lint
+on: 
   push:
   pull_request:
   workflow_dispatch:
 
 jobs:
-  yamllint:
-    runs-on: ubuntu-latest
-    steps:
-      - name: Checkout
-        uses: actions/checkout@v1
+  build:
+    name: Lint
+    runs-on: ubuntu-24.04
+
+    permissions:
+      contents: read
+      packages: read
+      # To report GitHub Actions status checks
+      statuses: write
 
-      - name: YAML Lint and Annotate
-        uses: Staffbase/[email protected]
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
         with:
-          token: ${{ secrets.GITHUB_TOKEN }}
-          ## The target path is processed recursively
-          target-path: .
+          # super-linter needs the full git history to get the
+          # list of files that changed across commits
+          fetch-depth: 0
+
+      - name: Super-linter
+        uses: super-linter/[email protected] # x-release-please-version
+        env:
+          # To report GitHub Actions status checks
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}