diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml index 1ab35b0..c5c8f14 100644 --- a/.github/workflows/codeql-analysis.yml +++ b/.github/workflows/codeql-analysis.yml @@ -25,7 +25,7 @@ on: # yamllint disable-line rule:truthy jobs: analyze: name: Analyze - runs-on: ubuntu-latest + runs-on: ubuntu-24.04 steps: - name: Checkout repository diff --git a/.github/workflows/flake8.yml b/.github/workflows/flake8.yml index c0abeaa..2527304 100644 --- a/.github/workflows/flake8.yml +++ b/.github/workflows/flake8.yml @@ -17,7 +17,7 @@ on: # yamllint disable-line rule:truthy jobs: build: - runs-on: ubuntu-latest + runs-on: ubuntu-24.04 steps: - uses: actions/checkout@v2 diff --git a/.github/workflows/gitguardian-scan.yml b/.github/workflows/gitguardian-scan.yml index 05e40d1..f7465f6 100644 --- a/.github/workflows/gitguardian-scan.yml +++ b/.github/workflows/gitguardian-scan.yml @@ -8,7 +8,7 @@ on: # yamllint disable-line rule:truthy jobs: scanning: name: GitGuardian scan - runs-on: ubuntu-latest + runs-on: ubuntu-24.04 steps: - name: Checkout uses: actions/checkout@v2 diff --git a/.github/workflows/trivy.yml b/.github/workflows/trivy.yml index 1ab1a2b..723f7cf 100644 --- a/.github/workflows/trivy.yml +++ b/.github/workflows/trivy.yml @@ -16,7 +16,7 @@ on: # yamllint disable-line rule:truthy jobs: container-analysis: - runs-on: ubuntu-latest + runs-on: ubuntu-24.04 steps: - uses: actions/checkout@v2 diff --git a/.github/workflows/yaml-lint.yml b/.github/workflows/yaml-lint.yml index bf40ecf..45d527d 100644 --- a/.github/workflows/yaml-lint.yml +++ b/.github/workflows/yaml-lint.yml @@ -1,20 +1,31 @@ --- -name: Yaml Lint -on: # yamllint disable-line rule:truthy +name: Super Lint +on: push: pull_request: workflow_dispatch: jobs: - yamllint: - runs-on: ubuntu-latest - steps: - - name: Checkout - uses: actions/checkout@v1 + build: + name: Lint + runs-on: ubuntu-24.04 + + permissions: + contents: read + packages: read + # To report GitHub Actions status checks + statuses: write - - name: YAML Lint and Annotate - uses: Staffbase/yamllint-action@v1.1.0 + steps: + - name: Checkout code + uses: actions/checkout@v4 with: - token: ${{ secrets.GITHUB_TOKEN }} - ## The target path is processed recursively - target-path: . + # super-linter needs the full git history to get the + # list of files that changed across commits + fetch-depth: 0 + + - name: Super-linter + uses: super-linter/super-linter@v7.2.0 # x-release-please-version + env: + # To report GitHub Actions status checks + GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}