From 548afb2db8463e1b803edd159696d102b4166c8c Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 19 Feb 2024 12:27:32 +0000 Subject: [PATCH 1/3] Bump super-linter/super-linter from 5 to 6 Bumps [super-linter/super-linter](https://github.com/super-linter/super-linter) from 5 to 6. - [Release notes](https://github.com/super-linter/super-linter/releases) - [Changelog](https://github.com/super-linter/super-linter/blob/main/CHANGELOG.md) - [Commits](https://github.com/super-linter/super-linter/compare/v5...v6) --- updated-dependencies: - dependency-name: super-linter/super-linter dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] --- .github/workflows/linter.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/linter.yml b/.github/workflows/linter.yml index dafff7b..20d0f0c 100644 --- a/.github/workflows/linter.yml +++ b/.github/workflows/linter.yml @@ -34,7 +34,7 @@ jobs: - name: Lint Codebase id: super-linter - uses: super-linter/super-linter/slim@v5 + uses: super-linter/super-linter/slim@v6 env: DEFAULT_BRANCH: main FILTER_REGEX_EXCLUDE: dist/**/* From 272c21a43745dbbae65e8fb5bfc5935f5414ce0b Mon Sep 17 00:00:00 2001 From: Nick Alteen Date: Thu, 22 Feb 2024 09:12:34 -0500 Subject: [PATCH 2/3] Fix fetch depth --- .github/linters/.checkov.yml | 6 ++++++ .github/workflows/linter.yml | 2 ++ Dockerfile | 2 ++ 3 files changed, 10 insertions(+) create mode 100644 .github/linters/.checkov.yml diff --git a/.github/linters/.checkov.yml b/.github/linters/.checkov.yml new file mode 100644 index 0000000..c306051 --- /dev/null +++ b/.github/linters/.checkov.yml @@ -0,0 +1,6 @@ +quiet: true +skip-check: + # Ensure that HEALTHCHECK instructions have been added to container images + - CKV_DOCKER_2 + # Ensure that a user for the container has been created + - CKV_DOCKER_3 diff --git a/.github/workflows/linter.yml b/.github/workflows/linter.yml index 20d0f0c..428ca1b 100644 --- a/.github/workflows/linter.yml +++ b/.github/workflows/linter.yml @@ -20,6 +20,8 @@ jobs: - name: Checkout id: checkout uses: actions/checkout@v4 + with: + fetch-depth: 0 - name: Setup Node.js id: setup-node diff --git a/Dockerfile b/Dockerfile index 8ca2dd0..2624dfa 100644 --- a/Dockerfile +++ b/Dockerfile @@ -3,6 +3,8 @@ FROM node:slim # Create a directory for the action code RUN mkdir -p /usr/src/app + +# Set the working directory inside the container. WORKDIR /usr/src/app # Copy the repository contents to the container From 0eceef997ef9e10596955215af34ae5b942554e3 Mon Sep 17 00:00:00 2001 From: Nick Alteen Date: Thu, 22 Feb 2024 09:18:08 -0500 Subject: [PATCH 3/3] Fix linting error --- .github/workflows/codeql-analysis.yml | 12 ++++++------ 1 file changed, 6 insertions(+), 6 deletions(-) diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml index 6ad7cb6..14d7281 100644 --- a/.github/workflows/codeql-analysis.yml +++ b/.github/workflows/codeql-analysis.yml @@ -10,17 +10,17 @@ on: schedule: - cron: '31 7 * * 3' +permissions: + actions: read + checks: write + contents: read + security-events: write + jobs: analyze: name: Analyze runs-on: ubuntu-latest - permissions: - actions: read - checks: write - contents: read - security-events: write - strategy: fail-fast: false matrix: