diff --git a/.github/linters/.checkov.yml b/.github/linters/.checkov.yml new file mode 100644 index 0000000..c306051 --- /dev/null +++ b/.github/linters/.checkov.yml @@ -0,0 +1,6 @@ +quiet: true +skip-check: + # Ensure that HEALTHCHECK instructions have been added to container images + - CKV_DOCKER_2 + # Ensure that a user for the container has been created + - CKV_DOCKER_3 diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml index 6ad7cb6..14d7281 100644 --- a/.github/workflows/codeql-analysis.yml +++ b/.github/workflows/codeql-analysis.yml @@ -10,17 +10,17 @@ on: schedule: - cron: '31 7 * * 3' +permissions: + actions: read + checks: write + contents: read + security-events: write + jobs: analyze: name: Analyze runs-on: ubuntu-latest - permissions: - actions: read - checks: write - contents: read - security-events: write - strategy: fail-fast: false matrix: diff --git a/.github/workflows/linter.yml b/.github/workflows/linter.yml index dafff7b..428ca1b 100644 --- a/.github/workflows/linter.yml +++ b/.github/workflows/linter.yml @@ -20,6 +20,8 @@ jobs: - name: Checkout id: checkout uses: actions/checkout@v4 + with: + fetch-depth: 0 - name: Setup Node.js id: setup-node @@ -34,7 +36,7 @@ jobs: - name: Lint Codebase id: super-linter - uses: super-linter/super-linter/slim@v5 + uses: super-linter/super-linter/slim@v6 env: DEFAULT_BRANCH: main FILTER_REGEX_EXCLUDE: dist/**/* diff --git a/Dockerfile b/Dockerfile index 8ca2dd0..2624dfa 100644 --- a/Dockerfile +++ b/Dockerfile @@ -3,6 +3,8 @@ FROM node:slim # Create a directory for the action code RUN mkdir -p /usr/src/app + +# Set the working directory inside the container. WORKDIR /usr/src/app # Copy the repository contents to the container