7 Commits

Author SHA1 Message Date
Ismo Vuorinen
e0c156ee93 chore(workflows): update php versions in composer-install 2024-09-10 16:13:44 +03:00
Ismo Vuorinen
48a5219b0d chore(workflows): drop root permissions read-all 2024-09-09 11:09:04 +03:00
renovate[bot]
73939e9d19 feat(github-action)!: Update peter-evans/create-pull-request ( v6 → v7 ) (#18) 2024-09-04 13:18:07 +03:00
Ismo Vuorinen
8c1beb34b9 fix(workflows): revert permissions to read-all 2024-09-02 15:04:09 +03:00
Ismo Vuorinen
8fb517d2a2 fix(workflows): testing correct permissions set 2024-09-02 14:52:27 +03:00
Ismo Vuorinen
7594e11680 chore(workflows): reviewdog should run only in pr 2024-09-02 14:44:56 +03:00
Ismo Vuorinen
c26b0521a8 fix(workflows): default to disabled permissions 2024-09-02 14:42:42 +03:00
14 changed files with 11 additions and 28 deletions

1
.envrc Normal file
View File

@@ -0,0 +1 @@
use asdf

View File

@@ -8,8 +8,6 @@ on:
- "composer.json"
- "composer.lock"
permissions: read-all
jobs:
ComposerInstall:
runs-on: ubuntu-latest
@@ -21,7 +19,7 @@ jobs:
strategy:
matrix:
operating-system: ["ubuntu-latest"]
php: ["8.0", "8.1", "8.2"]
php: ["8.1", "8.2", "8.3", "8.4"]
steps:
- uses: actions/checkout@v4

View File

@@ -8,8 +8,6 @@ on:
schedule:
- cron: "00 23 * * 0"
permissions: read-all
jobs:
CompressOnDemandOrSchedule:
name: calibreapp/image-actions
@@ -34,7 +32,7 @@ jobs:
- name: Create New Pull Request If Needed
if: steps.calibre.outputs.markdown != ''
uses: peter-evans/create-pull-request@v6
uses: peter-evans/create-pull-request@v7
with:
title: Compressed Images Nightly
branch-suffix: timestamp

View File

@@ -12,8 +12,6 @@ name: "Dependency Review"
on: [pull_request]
permissions: read-all
jobs:
dependency-review:
runs-on: ubuntu-latest

View File

@@ -7,8 +7,6 @@ on:
pull_request:
branches: [main]
permissions: read-all
jobs:
laravel-tests:
runs-on: ubuntu-latest

View File

@@ -11,8 +11,6 @@ on:
- "**.png"
- "**.webp"
permissions: read-all
jobs:
CompressInPR:
# Only run on Pull Requests within the same repository, and not from forks.

View File

@@ -24,8 +24,6 @@ on:
pull_request:
branches: [master, main]
permissions: read-all
###############
# Set the Job #
###############
@@ -62,14 +60,20 @@ jobs:
# Run Linter against code base #
################################
- name: Lint Code Base
uses: github/super-linter@v7
uses: super-linter/super-linter/slim@v7
env:
VALIDATE_ALL_CODEBASE: false
LINTER_RULES_PATH: "${DEFAULT_WORKSPACE}"
FIX_ANSIBLE: true
FIX_ENV: true
FIX_JSON: true
FIX_JSONC_PRETTIER: true
FIX_MARKDOWN: true
FIX_SHELL_SHFMT: true
FIX_TERRAFORM_FMT: true
FIX_TYPESCRIPT_PRETTIER: true
FIX_VUE_PRETTIER: true
FIX_YAML_PRETTIER: true
# Change to 'master' if your main branch differs
DEFAULT_BRANCH: ${{ env.MAIN_BRANCH }}
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

View File

@@ -4,8 +4,6 @@ name: Release Drafter
on:
workflow_call:
permissions: read-all
jobs:
update_release_draft:
name: ✏️ Draft release

View File

@@ -7,8 +7,6 @@ on:
schedule:
- cron: "0 0 1 * *" # 1st of every month at midnight
permissions: read-all
jobs:
release:
name: Release

View File

@@ -1,9 +1,7 @@
---
name: Reviewdog Linters
on: [push]
permissions: read-all
on: [pull_request]
jobs:
linters:

View File

@@ -7,8 +7,6 @@ on:
workflow_call:
workflow_dispatch:
permissions: read-all
jobs:
stale:
name: 🧹 Clean up stale issues and PRs

View File

@@ -12,8 +12,6 @@ on:
schedule:
- cron: "0 0 * * *" # Every day at midnight
permissions: read-all
jobs:
sync-labels:
runs-on: ubuntu-latest

View File

@@ -13,8 +13,6 @@ on:
workflow_call:
workflow_dispatch:
permissions: read-all
jobs:
labels:
name: ♻️ Sync labels