ci: Adding dependabot and bumping version prior

Signed-off-by: Vincent Boutour <[email protected]>
ViBiOh · Jun 25, 2022 · 3d20ba4 · 3d20ba4
1 parent be7fffc
commit 3d20ba4
Show file tree

Hide file tree

Showing 6 changed files with 83 additions and 16 deletions.
diff --git a/.github/dependabot.yaml b/.github/dependabot.yaml
@@ -1,10 +1,17 @@
 version: 2
 updates:
+  - package-ecosystem: github-actions
+    directory: /
+    schedule:
+      interval: daily
+    commit-message:
+      prefix: ci
+      include: scope
   - package-ecosystem: gomod
     directory: /
     schedule:
       interval: weekly
-      time: '06:00'
+      time: "06:00"
       day: sunday
     commit-message:
       prefix: chore

diff --git a/.github/workflows/branch_clean.yaml b/.github/workflows/branch_clean.yaml
@@ -1,6 +1,18 @@
 ---
 name: Git
 
+permissions:
+  actions: none
+  checks: none
+  contents: none
+  deployments: none
+  issues: none
+  packages: none
+  pages: none
+  pull-requests: none
+  repository-projects: none
+  security-events: none
+
 on:
   - pull_request
 

diff --git a/.github/workflows/build.yaml b/.github/workflows/build.yaml
@@ -1,6 +1,18 @@
 ---
 name: Build
 
+permissions:
+  actions: none
+  checks: none
+  contents: none
+  deployments: none
+  issues: none
+  packages: none
+  pages: none
+  pull-requests: none
+  repository-projects: none
+  security-events: none
+
 on:
   push:
     branches:
@@ -10,7 +22,7 @@ on:
       - main
 
 env:
-  SCRIPTS_NO_INTERACTIVE: 'true'
+  SCRIPTS_NO_INTERACTIVE: "true"
 
 defaults:
   run:
@@ -24,9 +36,9 @@ jobs:
       - name: Checkout
         uses: actions/checkout@v2
       - name: Setup Golang
-        uses: actions/setup-go@v2
+        uses: actions/setup-go@v3
         with:
-          go-version: '^1.18'
+          go-version: "^1.18"
       - name: golangci-lint
         uses: golangci/golangci-lint-action@v2
       - name: Build
@@ -58,22 +70,22 @@ jobs:
       - name: Checkout
         uses: actions/checkout@v2
       - name: Setup Golang
-        uses: actions/setup-go@v2
+        uses: actions/setup-go@v3
         with:
-          go-version: '^1.18'
+          go-version: "^1.18"
       - name: Build
         run: |
           curl --disable --silent --show-error --location --max-time 30 "https://raw.githubusercontent.com/ViBiOh/scripts/main/bootstrap" | bash -s -- "-c" "release"
           curl --disable --silent --show-error --location --max-time 30 -o mime.types "https://svn.apache.org/viewvc/httpd/httpd/trunk/docs/conf/mime.types?view=co"
           DOCKER_IMAGE="${{ secrets.DOCKER_USER }}/$(make name)" IMAGE_VERSION="$(make version)" ./scripts/release build
       - name: Setup Docker
-        uses: docker/setup-buildx-action@v1
+        uses: docker/setup-buildx-action@v2
       - name: Setup DockerHub
         if: env.DOCKER_USER && env.DOCKER_PASS
         env:
           DOCKER_USER: ${{ secrets.DOCKER_USER }}
           DOCKER_PASS: ${{ secrets.DOCKER_PASS }}
-        uses: docker/login-action@v1
+        uses: docker/login-action@v2
         with:
           username: ${{ secrets.DOCKER_USER }}
           password: ${{ secrets.DOCKER_PASS }}

diff --git a/.github/workflows/codeql-analysis.yaml b/.github/workflows/codeql-analysis.yaml
@@ -1,6 +1,18 @@
 ---
 name: CodeQL
 
+permissions:
+  actions: none
+  checks: none
+  contents: none
+  deployments: none
+  issues: none
+  packages: none
+  pages: none
+  pull-requests: none
+  repository-projects: none
+  security-events: write
+
 on:
   push:
     branches:
@@ -9,7 +21,7 @@ on:
     branches:
       - main
   schedule:
-    - cron: '0 0 * * 6'
+    - cron: "0 0 * * 6"
 
 jobs:
   analyze:
@@ -24,13 +36,13 @@ jobs:
       - name: Checkout
         uses: actions/checkout@v2
       - name: Setup CodeQL
-        uses: github/codeql-action/init@v1
+        uses: github/codeql-action/init@v2
         with:
           languages: ${{ matrix.language }}
       - name: Setup Golang
-        uses: actions/setup-go@v2
+        uses: actions/setup-go@v3
         with:
-          go-version: '^1.18'
+          go-version: "^1.18"
       - name: Build
         run: make build
       - name: CodeQL

diff --git a/.github/workflows/herodote.yaml b/.github/workflows/herodote.yaml
@@ -1,6 +1,18 @@
 ---
 name: Herodote
 
+permissions:
+  actions: none
+  checks: none
+  contents: none
+  deployments: none
+  issues: none
+  packages: none
+  pages: none
+  pull-requests: none
+  repository-projects: none
+  security-events: none
+
 on:
   push:
     branches:
@@ -24,4 +36,4 @@ jobs:
           HERODOTE_SECRET: ${{ secrets.HERODOTE_SECRET }}
           GIT_HOST: github.com
           GIT_REPOSITORY: ${{ github.repository }}
-          SCRIPTS_NO_INTERACTIVE: '1'
+          SCRIPTS_NO_INTERACTIVE: "1"
diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
@@ -1,13 +1,25 @@
 ---
 name: Release
 
+permissions:
+  actions: none
+  checks: none
+  contents: write
+  deployments: none
+  issues: none
+  packages: none
+  pages: none
+  pull-requests: none
+  repository-projects: none
+  security-events: none
+
 on:
   release:
     types:
       - released
 
 env:
-  SCRIPTS_NO_INTERACTIVE: 'true'
+  SCRIPTS_NO_INTERACTIVE: "true"
 
 defaults:
   run:
@@ -21,9 +33,9 @@ jobs:
       - name: Checkout
         uses: actions/checkout@v2
       - name: Setup Golang
-        uses: actions/setup-go@v2
+        uses: actions/setup-go@v3
         with:
-          go-version: '^1.18'
+          go-version: "^1.18"
       - name: Build
         run: make init
       - name: Assets