Bump gitleaks/gitleaks from 8.18.0 to 8.18.1 (#6)

* docs(license): update copyright year(s)

* Bump gitleaks/gitleaks from 8.18.0 to 8.18.1

---------

Co-authored-by: github-actions <github-actions@github.com>
Co-authored-by: fabasoad <fabasoad@gmail.com>

Author: 3 people

.github/workflows/functional-tests-local.yml

@@ -2,22 +2,27 @@
 name: Functional tests (Local)
 
 on: # yamllint disable-line rule:truthy
+  pull_request: {}
   push:
     branches:
       - "main"
-  pull_request:
+
+defaults:
+  run:
+    shell: sh
 
 jobs:
-  functional_tests:
+  functional-tests:
     name: Functional tests
     timeout-minutes: 5
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - name: Checkout ${{ github.repository }}
+        uses: actions/checkout@v4
       - uses: ./
         id: pascal
         with:
           path: ./HelloWorld.pas
       - name: Validate result
         run: |
-          [[ "Hello World!" == "${{ steps.pascal.outputs.result }}" ]] || exit 1;
+          [ "Hello World!" = "${{ steps.pascal.outputs.result }}" ] || exit 1;

.github/workflows/functional-tests-remote.yml

@@ -6,17 +6,23 @@ on: # yamllint disable-line rule:truthy
     branches:
       - "main"
 
+defaults:
+  run:
+    shell: sh
+
 jobs:
-  functional-tests:
+  functional-tests-remote:
     name: Functional tests
     timeout-minutes: 5
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
-      - uses: fabasoad/pascal-action@main
+      - name: Checkout ${{ github.repository }}
+        uses: actions/checkout@v4
+      - name: Run Pascal script
+        uses: fabasoad/pascal-action@main
         id: pascal
         with:
           path: ./HelloWorld.pas
       - name: Validate result
         run: |
-          [[ "Hello World!" == "${{ steps.pascal.outputs.result }}" ]] || exit 1;
+          [ "Hello World!" = "${{ steps.pascal.outputs.result }}" ] || exit 1;

.github/workflows/linting.yml

@@ -0,0 +1,13 @@
+---
+name: Linting
+
+on: # yamllint disable-line rule:truthy
+  pull_request: {}
+  push:
+    branches:
+      - main
+
+jobs:
+  pre-commit:
+    name: Pre-commit
+    uses: fabasoad/reusable-workflows/.github/workflows/wf-pre-commit.yml@main

.github/workflows/pre-commit.yml

@@ -11,7 +11,8 @@ jobs:
     name: Create release
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - name: Checkout ${{ github.repository }}
+        uses: actions/checkout@v4
         with:
           fetch-depth: 0
       - name: Get changelog

.github/workflows/release.yml

@@ -0,0 +1,51 @@
+---
+name: Security
+
+on: # yamllint disable-line rule:truthy
+  pull_request: {}
+  push:
+    branches:
+      - main
+
+defaults:
+  run:
+    shell: sh
+
+jobs:
+  code-scanning:
+    name: Code scanning
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout ${{ github.repository }}
+        uses: actions/checkout@v4
+      - name: Initialize CodeQL
+        uses: github/codeql-action/init@v3
+        with:
+          languages: "javascript"
+      - name: Perform CodeQL Analysis
+        id: codeql-analysis
+        uses: github/codeql-action/analyze@v3
+      - name: Upload to GHAS
+        if: always()
+        uses: github/codeql-action/upload-sarif@v3
+        with:
+          category: "code-scanning"
+          sarif_file: "${{ steps.codeql-analysis.outputs.sarif-output }}"
+  directory-scanning:
+    name: Directory scanning
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout ${{ github.repository }}
+        uses: actions/checkout@v4
+      - name: Scan current project
+        id: scan-directory
+        uses: anchore/scan-action@v3
+        with:
+          by-cve: "true"
+          path: "."
+      - name: Upload to GHAS
+        if: always()
+        uses: github/codeql-action/upload-sarif@v3
+        with:
+          category: "directory-scanning"
+          sarif_file: "${{ steps.scan-directory.outputs.sarif }}"

.github/workflows/security.yml

@@ -9,7 +9,7 @@ repos:
     hooks:
       - id: detect-secrets
   - repo: https://github.com/gitleaks/gitleaks
-    rev: v8.18.0
+    rev: v8.18.1
     hooks:
       - id: gitleaks
   # Dockerfile
@@ -20,13 +20,13 @@ repos:
         stages: ["push"]
   # Markdown
   - repo: https://github.com/igorshubovych/markdownlint-cli
-    rev: v0.37.0
+    rev: v0.38.0
     hooks:
       - id: markdownlint-fix
         stages: ["commit"]
   # Yaml
   - repo: https://github.com/adrienverge/yamllint
-    rev: v1.32.0
+    rev: v1.33.0
     hooks:
       - id: yamllint
         stages: ["push"]
@@ -39,7 +39,7 @@ repos:
         stages: ["push"]
   # Other
   - repo: https://github.com/pre-commit/mirrors-prettier
-    rev: v3.0.3
+    rev: v3.1.0
     hooks:
       - id: prettier
         stages: ["commit"]

.pre-commit-config.yaml

@@ -1,6 +1,6 @@
 MIT License
 
-Copyright (c) 2020-2023 Yevhen Fabizhevskyi
+Copyright (c) 2020-2024 Yevhen Fabizhevskyi
 
 Permission is hereby granted, free of charge, to any person obtaining a copy
 of this software and associated documentation files (the "Software"), to deal

LICENSE

@@ -6,7 +6,8 @@
 ![GitHub release](https://img.shields.io/github/v/release/fabasoad/pascal-action?include_prereleases)
 ![functional-tests-local](https://github.com/fabasoad/pascal-action/actions/workflows/functional-tests-local.yml/badge.svg)
 ![functional-tests-remote](https://github.com/fabasoad/pascal-action/actions/workflows/functional-tests-remote.yml/badge.svg)
-![pre-commit](https://github.com/fabasoad/pascal-action/actions/workflows/pre-commit.yml/badge.svg)
+![security](https://github.com/fabasoad/pascal-action/actions/workflows/security.yml/badge.svg)
+![linting](https://github.com/fabasoad/pascal-action/actions/workflows/linting.yml/badge.svg)
 
 This action runs Pascal script.