chore: Set top-level permissions to read-all (#1649)

Author: HofmeisterAn

.github/settings.yml

@@ -125,6 +125,7 @@ labels:
 collaborators:
   - username: HofmeisterAn
     permission: admin
+
   - username: testcontainersbot
     permission: write
 
@@ -175,9 +176,9 @@ branches:
         # Required. Require branches to be up to date before merging.
         strict: true
         # Required. The list of status checks to require in order to merge into this branch
-        contexts: ["Test Report", "analyze (csharp)"]
+        contexts: [ test-report ]
       # Required. Enforce all configured restrictions for administrators. Set to true to enforce required status checks for repository administrators. Set to null to disable.
-      enforce_admins: false
+      enforce_admins: true
       # Prevent merge commits from being pushed to matching branches
       required_linear_history: true
       # Required. Restrict who can push to this branch. Team and user restrictions are only available for organization-owned repositories. Set to null to disable.
@@ -207,9 +208,9 @@ branches:
         # Required. Require branches to be up to date before merging.
         strict: true
         # Required. The list of status checks to require in order to merge into this branch
-        contexts: ["Test Report", "analyze (csharp)"]
+        contexts: [ test-report ]
       # Required. Enforce all configured restrictions for administrators. Set to true to enforce required status checks for repository administrators. Set to null to disable.
-      enforce_admins: false
+      enforce_admins: true
       # Prevent merge commits from being pushed to matching branches
       required_linear_history: true
       # Required. Restrict who can push to this branch. Team and user restrictions are only available for organization-owned repositories. Set to null to disable.

.github/workflows/cicd.yml

@@ -182,13 +182,14 @@ jobs:
         shell: bash
 
       - name: Attest
+        if: ${{ env.PUBLISH_NUGET_PACKAGE == 'true' }}
         uses: actions/attest@59d89421af93a897026c735860bf21b6eb4f7b26 # v4.1.0
         with:
-          subject-path: '**/*.nupkg'
+          subject-path: artifacts/**/nuget/Testcontainers*.nupkg
 
       # Cake sets the semVer environment variable.
       - name: Draft Release
-        uses: release-drafter/release-drafter@6db134d15f3909ccc9eefd369f02bd1e9cffdf97 # v6.2.0
+        uses: release-drafter/release-drafter@00ce30b0ce8a4d67bccfca59421cdf6c55dd0784 # v6.3.0
         with:
           version: ${{ env.semVer }}
         env:

.github/workflows/codeql-analysis.yml

@@ -12,6 +12,8 @@ concurrency:
   group: ${{ github.workflow }}-${{ github.head_ref || github.sha }}
   cancel-in-progress: true
 
+permissions: read-all
+
 jobs:
   analyze:
     strategy:

.github/workflows/scorecard-analysis.yml

@@ -9,6 +9,8 @@ concurrency:
   group: ${{ github.workflow }}-${{ github.head_ref || github.sha }}
   cancel-in-progress: true
 
+permissions: read-all
+
 jobs:
   analyze:
     permissions:

.github/workflows/test-report.yml

@@ -7,6 +7,8 @@ on:
     types:
       - completed
 
+permissions: read-all
+
 jobs:
   test-report:
     permissions:

docs/contributing_docs.md

@@ -11,7 +11,7 @@ We publish our documentation using Netlify.
 
 ### Using Python locally
 
-* Ensure that you have Python 3.8.0 or higher.
+* Ensure that you have Python 3.11.0 or higher.
 * Set up a virtualenv and run `pip install -r requirements.txt` in the `testcontainers-dotnet` root directory.
 * Once Python dependencies have been installed, run `mkdocs serve` to start a local auto-updating MkDocs server.
 

docs/theme/partials/header.html

@@ -36,7 +36,7 @@
     class="md-header__inner md-grid"
     aria-label="{{ lang.t('header') }}"
   >
-  
+
     <!-- Button to open drawer -->
     <label class="md-header__button md-icon" for="__drawer">
       {% include ".icons/material/menu" ~ ".svg" %}
@@ -124,9 +124,10 @@
     {% endif %}
 
     <!-- Button to open search modal -->
-    {% if "search" in config.plugins %}
+    {% if "material/search" in config.plugins %}
       <label class="md-header__button md-icon" for="__search">
-        {% include ".icons/material/magnify.svg" %}
+        {% set icon = config.theme.icon.search or "material/magnify" %}
+        {% include ".icons/" ~ icon ~ ".svg" %}
       </label>
 
       <!-- Search interface -->

docs/theme/partials/nav.html

@@ -18,6 +18,7 @@
 -->
 
 <!-- Determine class according to configuration -->
+{% import "partials/nav-item.html" as item with context %}
 {% set class = "md-nav md-nav--primary" %}
 {% if "navigation.tabs" in features %}
 {% set class = class ~ " md-nav--lifted" %}
@@ -45,8 +46,7 @@
   <ul class="md-nav__list" data-md-scrollfix>
     {% for nav_item in nav %}
     {% set path = "__nav_" ~ loop.index %}
-    {% set level = 1 %}
-    {% include "partials/nav-item.html" %}
+    {{ item.render(nav_item, path, 1) }}
     {% endfor %}
     <li class="community-callout-wrapper">
       <div class="community-callout">

docs/theme/partials/tc-header.html

@@ -107,7 +107,7 @@
                 <rect y="22" width="30" height="4" rx="2"/>
                 <rect y="13" width="30" height="4" rx="2"/>
                 <rect y="4" width="30" height="4" rx="2"/>
-            </svg>        
+            </svg>
         </button>
     </div>
     <nav>
@@ -134,7 +134,7 @@
                                                 <use href="#icon-external"></use>
                                             </svg>
                                         {% endif %}
-                                    </a>   
+                                    </a>
                                 </li>
                             {% endfor %}
                         </ul>

mkdocs.yml

@@ -11,6 +11,8 @@ theme:
   font:
     text: Roboto
     code: Roboto Mono
+  features:
+    - content.code.copy
   favicon: favicon.ico
   logo: logo.svg
 extra_css:
@@ -29,6 +31,8 @@ markdown_extensions:
   - pymdownx.superfences
   - pymdownx.tabbed:
       alternate_style: true
+  - toc:
+      permalink: true
 nav:
   - index.md
   - cicd/index.md