lint cleanup: zizmor, prettier, yamllint

Author: kernelsam

.github/linters/.yaml-lint.yml

@@ -2,6 +2,9 @@
 extends: default
 
 rules:
+  document-start: disable
+  comments:
+    min-spaces-from-content: 1
   comments-indentation: disable
   line-length:
     level: warning

.github/linters/zizmor.yaml

@@ -1,4 +1,6 @@
 rules:
+  secrets-outside-env:
+    disable: true
   unpinned-uses:
     config:
       policies:

.github/workflows/add-labels-standardized.yaml

@@ -18,4 +18,3 @@ jobs:
       SLACK_BOT_TOKEN: ${{ secrets.SLACK_BOT_TOKEN }}
       SLACK_CHANNEL: ${{ secrets.SLACK_CHANNEL }}
     uses: senzing-factory/build-resources/.github/workflows/add-labels-to-issue.yaml@v4
-

.github/workflows/add-to-project-garage-dependabot.yaml

@@ -17,4 +17,3 @@ jobs:
     uses: senzing-factory/build-resources/.github/workflows/add-to-project-dependabot.yaml@v4
     with:
       project: ${{ vars.SENZING_PROJECT_GARAGE }}
-

.github/workflows/add-to-project-garage.yaml

@@ -20,4 +20,3 @@ jobs:
     with:
       project-number: ${{ vars.SENZING_PROJECT_GARAGE }}
       org: ${{ vars.SENZING_GITHUB_ACCOUNT_NAME }}
-

.github/workflows/build-distribution.yaml

@@ -58,4 +58,3 @@ jobs:
           job-status: ${{ job.status }}
           slack-channel: ${{ secrets.SLACK_CHANNEL }}
           slack-bot-token: ${{ secrets.SLACK_BOT_TOKEN }}
-

.github/workflows/create-sphinx-documentation.yaml

@@ -55,4 +55,3 @@ jobs:
           job-status: ${{ job.status }}
           slack-channel: ${{ secrets.SLACK_CHANNEL }}
           slack-bot-token: ${{ secrets.SLACK_BOT_TOKEN }}
-

.github/workflows/publish-to-pypi.yaml

@@ -104,4 +104,3 @@ jobs:
         # `dist/` contains the built packages, and the
         # sigstore-produced signatures and certificates.
         run: gh release upload "${GITHUB_REF_NAME}" dist/** --repo "${{ github.repository }}"
-

.github/workflows/pylint.yaml

@@ -44,4 +44,3 @@ jobs:
         run: |
           # shellcheck disable=SC2046
           pylint $(git ls-files '*.py' ':!:docs/source/*')
-

.github/workflows/pytest-darwin.yaml

@@ -80,8 +80,9 @@ jobs:
         with:
           client-id: ${{ secrets.SENZINGSDK_STAGING_CLIENT_ID }}
           private-key: ${{ secrets.SENZINGSDK_STAGING_APP_KEY }}
-          owner: senzing-factory
+          owner: senzing-factory # zizmor: ignore[github-app]
           repositories: homebrew-senzingsdk-staging
+          permission-contents: read
 
       - name: Install Senzing SDK
         uses: senzing-factory/github-action-install-senzing-sdk@v5
@@ -133,4 +134,3 @@ jobs:
       pull-requests: write
       contents: write
     uses: senzing-factory/build-resources/.github/workflows/python-coverage-comment.yaml@v4
-