lint cleanup: zizmor, prettier, yamllint

Author: kernelsam

.github/linters/.yaml-lint.yml

@@ -2,6 +2,9 @@
 extends: default
 
 rules:
+  document-start: disable
+  comments:
+    min-spaces-from-content: 1
   comments-indentation: disable
   line-length:
     level: warning

.github/linters/zizmor.yaml

@@ -1,4 +1,6 @@
 rules:
+  secrets-outside-env:
+    disable: true
   unpinned-uses:
     config:
       policies:

.github/workflows/add-labels-standardized.yaml

@@ -18,4 +18,3 @@ jobs:
       SLACK_BOT_TOKEN: ${{ secrets.SLACK_BOT_TOKEN }}
       SLACK_CHANNEL: ${{ secrets.SLACK_CHANNEL }}
     uses: senzing-factory/build-resources/.github/workflows/add-labels-to-issue.yaml@v4
-

.github/workflows/add-to-project-g2-python-dependabot.yaml

@@ -17,4 +17,3 @@ jobs:
     uses: senzing-factory/build-resources/.github/workflows/add-to-project-dependabot.yaml@v4
     with:
       project: ${{ vars.SENZING_PROJECT_G2_PYTHON }}
-

.github/workflows/add-to-project-g2-python.yaml

@@ -20,4 +20,3 @@ jobs:
     with:
       project-number: ${{ vars.SENZING_PROJECT_G2_PYTHON }}
       org: ${{ vars.SENZING_GITHUB_ACCOUNT_NAME }}
-

.github/workflows/add-to-project-garage-dependabot.yaml

@@ -17,4 +17,3 @@ jobs:
     uses: senzing-factory/build-resources/.github/workflows/add-to-project-dependabot.yaml@v4
     with:
       project: ${{ vars.SENZING_PROJECT_GARAGE }}
-

.github/workflows/add-to-project-garage.yaml

@@ -20,4 +20,3 @@ jobs:
     with:
       project-number: ${{ vars.SENZING_PROJECT_GARAGE }}
       org: ${{ vars.SENZING_GITHUB_ACCOUNT_NAME }}
-

.github/workflows/pylint.yaml

@@ -44,4 +44,3 @@ jobs:
         run: |
           # shellcheck disable=SC2046
           pylint $(git ls-files '*.py' ':!:docs/source/*')
-

.github/workflows/pytest-darwin.yaml

@@ -72,8 +72,9 @@ jobs:
         with:
           client-id: ${{ secrets.SENZINGSDK_STAGING_CLIENT_ID }}
           private-key: ${{ secrets.SENZINGSDK_STAGING_APP_KEY }}
-          owner: senzing-factory
+          owner: senzing-factory # zizmor: ignore[github-app]
           repositories: homebrew-senzingsdk-staging
+          permission-contents: read
 
       - name: Install Senzing SDK
         uses: senzing-factory/github-action-install-senzing-sdk@v5

.github/workflows/pytest-windows.yaml

@@ -70,8 +70,9 @@ jobs:
         with:
           client-id: ${{ secrets.SENZINGSDK_STAGING_CLIENT_ID }}
           private-key: ${{ secrets.SENZINGSDK_STAGING_APP_KEY }}
-          owner: senzing-factory
+          owner: senzing-factory # zizmor: ignore[github-app]
           repositories: scoop-senzingsdk-staging
+          permission-contents: read
 
       - name: Install Senzing SDK
         uses: senzing-factory/github-action-install-senzing-sdk@v5