From 2d7d4f9c1c98b2666e3f6dfcbb0a65553613e999 Mon Sep 17 00:00:00 2001 From: Christian Oliff Date: Mon, 8 Sep 2025 21:36:07 +0900 Subject: [PATCH] GitHub Actions Fixes --- .cspell.json | 3 ++- .github/workflows/azure-static-web-apps-deploy.yml | 3 ++- .github/workflows/codeql-analysis.yml | 8 +++++--- .github/workflows/dependency-review.yml | 2 +- .github/workflows/sonar-scan.yml | 5 +++-- .github/workflows/spellcheck.yml | 4 ++-- .github/workflows/super-linter.yml | 4 +++- .github/workflows/test.yml | 8 +++++--- .htmlhintrc | 1 - 9 files changed, 23 insertions(+), 15 deletions(-) diff --git a/.cspell.json b/.cspell.json index 85588186..0dcf84ac 100644 --- a/.cspell.json +++ b/.cspell.json @@ -39,7 +39,8 @@ "trimble", "unapprove", "unreviewed", - "xmldoc" + "xmldoc", + "ZIZMOR" ], "allowCompoundWords": true, "flagWords": [ diff --git a/.github/workflows/azure-static-web-apps-deploy.yml b/.github/workflows/azure-static-web-apps-deploy.yml index f0ba88b9..2933b8ac 100644 --- a/.github/workflows/azure-static-web-apps-deploy.yml +++ b/.github/workflows/azure-static-web-apps-deploy.yml @@ -15,10 +15,11 @@ jobs: runs-on: ubuntu-latest name: Build and Deploy Job steps: - - uses: actions/checkout@v5 + - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0 with: submodules: recursive fetch-depth: 0 # Fetch all history for .GitInfo and .Lastmod + persist-credentials: false - name: Setup Hugo uses: peaceiris/actions-hugo@v3 diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml index a2d98aa4..7ac50150 100644 --- a/.github/workflows/codeql-analysis.yml +++ b/.github/workflows/codeql-analysis.yml @@ -28,15 +28,17 @@ jobs: steps: - name: Checkout repository - uses: actions/checkout@v5 + uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0 + with: + persist-credentials: false - name: Initialize CodeQL - uses: github/codeql-action/init@v3 + uses: github/codeql-action/init@2d92b76c45b91eb80fc44c74ce3fce0ee94e8f9d # v3.30.0 with: languages: ${{ matrix.language }} queries: +security-and-quality - name: Perform CodeQL Analysis - uses: github/codeql-action/analyze@v3 + uses: github/codeql-action/analyze@2d92b76c45b91eb80fc44c74ce3fce0ee94e8f9d # v3.30.0 with: category: "/language:${{matrix.language}}" diff --git a/.github/workflows/dependency-review.yml b/.github/workflows/dependency-review.yml index 2ba910df..22cfeb49 100644 --- a/.github/workflows/dependency-review.yml +++ b/.github/workflows/dependency-review.yml @@ -10,7 +10,7 @@ jobs: if: ${{ github.actor != 'dependabot[bot]' }} steps: - name: "Checkout Repository" - uses: actions/checkout@v5 + uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0 with: persist-credentials: false diff --git a/.github/workflows/sonar-scan.yml b/.github/workflows/sonar-scan.yml index cb24315e..6b087334 100644 --- a/.github/workflows/sonar-scan.yml +++ b/.github/workflows/sonar-scan.yml @@ -22,12 +22,13 @@ jobs: steps: - name: Checkout repository - uses: actions/checkout@v5 + uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0 with: fetch-depth: 0 + persist-credentials: false - name: Setup Node.js - uses: actions/setup-node@v4 + uses: actions/setup-node@a0853c24544627f65ddf259abe73b1d18a591444 # v5.0.0 with: node-version: 18 diff --git a/.github/workflows/spellcheck.yml b/.github/workflows/spellcheck.yml index dcfd4f58..2d87ee68 100644 --- a/.github/workflows/spellcheck.yml +++ b/.github/workflows/spellcheck.yml @@ -15,10 +15,10 @@ jobs: runs-on: ubuntu-latest if: ${{ github.actor != 'dependabot[bot]' }} steps: - - uses: actions/checkout@v5 + - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0 with: persist-credentials: false - - uses: streetsidesoftware/cspell-action@v7 + - uses: streetsidesoftware/cspell-action@dcd03dc3e8a59ec2e360d0c62db517baa0b4bb6d # v7.2.0 with: check_dot_files: false incremental_files_only: true diff --git a/.github/workflows/super-linter.yml b/.github/workflows/super-linter.yml index 57a58319..78bebed3 100644 --- a/.github/workflows/super-linter.yml +++ b/.github/workflows/super-linter.yml @@ -19,9 +19,10 @@ jobs: steps: - name: Checkout Code - uses: actions/checkout@v5 + uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0 with: fetch-depth: 0 + persist-credentials: false - name: Lint Code Base uses: super-linter/super-linter/slim@v8 @@ -37,6 +38,7 @@ jobs: VALIDATE_CHECKOV: false VALIDATE_CSS: false VALIDATE_EDITORCONFIG: false + VALIDATE_GITHUB_ACTIONS_ZIZMOR: false VALIDATE_HTML: false VALIDATE_JSCPD: false VALIDATE_NATURAL_LANGUAGE: false diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml index 8eac1c22..70b62380 100644 --- a/.github/workflows/test.yml +++ b/.github/workflows/test.yml @@ -20,10 +20,12 @@ jobs: steps: - name: Clone repository - uses: actions/checkout@v5 + uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0 + with: + persist-credentials: false - name: Set up Node.js - uses: actions/setup-node@v4 + uses: actions/setup-node@a0853c24544627f65ddf259abe73b1d18a591444 # v5.0.0 with: node-version: "${{ env.NODE }}" cache: npm @@ -35,7 +37,7 @@ jobs: run: npm run test - name: Run linkinator - uses: JustinBeckwith/linkinator-action@v1 + uses: JustinBeckwith/linkinator-action@3d5ba091319fa7b0ac14703761eebb7d100e6f6d # v1.11.0 with: paths: public skip: "^(?!http://localhost)" diff --git a/.htmlhintrc b/.htmlhintrc index 37feef3e..78368bcc 100644 --- a/.htmlhintrc +++ b/.htmlhintrc @@ -15,7 +15,6 @@ "id-unique": false, "inline-script-disabled": false, "inline-style-disabled": false, - "space-tab-mixed-disabled": space, "spec-char-escape": false, "src-not-empty": true, "style-disabled": false,