Skip to content

Commit 35f5ae6

Browse files
mbaldessarimbaldessari
committed
Upgrade super-linter to v8.5.0
- Pin super-linter to v8.5.0 (SHA 61abc07d) - Pin all GitHub Actions to SHA references - Add persist-credentials: false to checkout steps - Add permissions: read-all to workflow files - Add dependabot cooldown and grouping configuration - Disable new v8 linters not applicable to this repo - Add FILTER_REGEX_EXCLUDE for nested .github directories - Add zizmor ignore comments for reusable workflow refs - Update markdownlint config for new rules - Migrate ansible-lint-action to ansible/ansible-lint
1 parent 5abac98 commit 35f5ae6

7 files changed

Lines changed: 55 additions & 13 deletions

File tree

‎.github/dependabot.yml‎

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -6,3 +6,9 @@ updates:
66
directory: "/"
77
schedule:
88
interval: "weekly"
9+
groups:
10+
github-actions:
11+
patterns:
12+
- "*"
13+
cooldown:
14+
default-days: 7

‎.github/linters/.markdown-lint.yml‎

Lines changed: 9 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,9 @@
1+
{
2+
"default": true,
3+
"MD003": false,
4+
"MD013": false,
5+
"MD033": false,
6+
"MD059": false,
7+
"MD060": false,
8+
"MD034": false
9+
}

‎.github/workflows/helm-lint.yml‎

Lines changed: 5 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -6,7 +6,7 @@ name: Helm lint
66
# https://help.github.com/en/articles/workflow-syntax-for-github-actions
77
#
88

9-
permissions: read-all
9+
permissions: read-all # zizmor: ignore[excessive-permissions]
1010

1111
on: [push, pull_request]
1212

@@ -17,10 +17,12 @@ jobs:
1717

1818
steps:
1919
- name: Checkout Code
20-
uses: actions/checkout@v5
20+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
21+
with:
22+
persist-credentials: false
2123

2224
- name: Setup helm
23-
uses: azure/setup-helm@v4
25+
uses: azure/setup-helm@dda3372f752e03dde6b3237bc9431cdc2f7a02a2 # v5.0.0
2426
with:
2527
version: 'v3.14.0'
2628

‎.github/workflows/helm-unittest.yml‎

Lines changed: 4 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -6,7 +6,7 @@ name: Helm Unit Test
66
# https://help.github.com/en/articles/workflow-syntax-for-github-actions
77
#
88

9-
permissions: read-all
9+
permissions: read-all # zizmor: ignore[excessive-permissions]
1010

1111
on: [push, pull_request]
1212

@@ -18,7 +18,9 @@ jobs:
1818

1919
steps:
2020
- name: Checkout Code
21-
uses: actions/checkout@v5
21+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
22+
with:
23+
persist-credentials: false
2224

2325
- name: Run make helmlint
2426
run: |

‎.github/workflows/superlinter.yml‎

Lines changed: 14 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -2,7 +2,7 @@
22
name: Super linter
33

44
on: [push, pull_request]
5-
permissions: read-all
5+
permissions: read-all # zizmor: ignore[excessive-permissions]
66

77
jobs:
88
build:
@@ -13,16 +13,17 @@ jobs:
1313

1414
steps:
1515
- name: Checkout Code
16-
uses: actions/checkout@v5
16+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
1717
with:
18+
persist-credentials: false
1819
# Full git history is needed to get a proper list of changed files within `super-linter`
1920
fetch-depth: 0
2021

2122
################################
2223
# Run Linter against code base #
2324
################################
2425
- name: Lint Code Base
25-
uses: super-linter/super-linter/slim@v7
26+
uses: super-linter/super-linter/slim@61abc07d755095a68f4987d1c2c3d1d64408f1f9 # v8.5.0
2627
env:
2728
VALIDATE_ALL_CODEBASE: true
2829
DEFAULT_BRANCH: main
@@ -36,3 +37,13 @@ jobs:
3637
VALIDATE_MARKDOWN_PRETTIER: false
3738
VALIDATE_YAML: false
3839
VALIDATE_YAML_PRETTIER: false
40+
VALIDATE_BIOME_FORMAT: false
41+
VALIDATE_BIOME_LINT: false
42+
VALIDATE_NATURAL_LANGUAGE: false
43+
VALIDATE_SPELL_CODESPELL: false
44+
VALIDATE_PYTHON_BLACK: false
45+
VALIDATE_PYTHON_PYINK: false
46+
VALIDATE_PYTHON_PYLINT: false
47+
VALIDATE_PYTHON_RUFF_FORMAT: false
48+
VALIDATE_SHELL_SHFMT: false
49+
VALIDATE_TRIVY: false

‎.github/workflows/update-helm-repo.yml‎

Lines changed: 6 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -17,14 +17,16 @@ on:
1717
tags:
1818
- 'v[0-9]+.[0-9]+.[0-9]+'
1919

20+
permissions: read-all
21+
2022
jobs:
2123
helmlint:
22-
uses: validatedpatterns/helm-charts/.github/workflows/helmlint.yml@workflow-stable
24+
uses: validatedpatterns/helm-charts/.github/workflows/helmlint.yml@workflow-stable # zizmor: ignore[unpinned-uses]
2325
permissions:
2426
contents: read
2527

2628
update-helm-repo:
2729
needs: [helmlint]
28-
uses: validatedpatterns/helm-charts/.github/workflows/update-helm-repo.yml@workflow-stable
29-
permissions: read-all
30-
secrets: inherit
30+
uses: validatedpatterns/helm-charts/.github/workflows/update-helm-repo.yml@workflow-stable # zizmor: ignore[unpinned-uses]
31+
permissions: read-all # zizmor: ignore[excessive-permissions]
32+
secrets: inherit # zizmor: ignore[secrets-inherit]

‎Makefile‎

Lines changed: 11 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -43,6 +43,16 @@ super-linter: ## Runs super linter locally
4343
-e VALIDATE_MARKDOWN_PRETTIER=false \
4444
-e VALIDATE_YAML_PRETTIER=false \
4545
-e VALIDATE_YAML=false \
46+
-e VALIDATE_BIOME_FORMAT=false \
47+
-e VALIDATE_BIOME_LINT=false \
48+
-e VALIDATE_NATURAL_LANGUAGE=false \
49+
-e VALIDATE_SPELL_CODESPELL=false \
50+
-e VALIDATE_PYTHON_BLACK=false \
51+
-e VALIDATE_PYTHON_PYINK=false \
52+
-e VALIDATE_PYTHON_PYLINT=false \
53+
-e VALIDATE_PYTHON_RUFF_FORMAT=false \
54+
-e VALIDATE_SHELL_SHFMT=false \
55+
-e VALIDATE_TRIVY=false \
4656
-v $(PWD):/tmp/lint:rw,z \
4757
-w /tmp/lint \
48-
ghcr.io/super-linter/super-linter:slim-v7
58+
ghcr.io/super-linter/super-linter:slim-v8

0 commit comments

Comments
 (0)