ci: Adding dependabot and bumping version prior

Signed-off-by: Vincent Boutour <bob@vibioh.fr>
ViBiOh · Jun 25, 2022 · ae1f95f · ae1f95f
1 parent f0b15b4
commit ae1f95f
Show file tree

Hide file tree

Showing 6 changed files with 83 additions and 16 deletions.
diff --git a/.github/dependabot.yaml b/.github/dependabot.yaml
@@ -1,11 +1,18 @@
 version: 2
 updates:
-- package-ecosystem: gomod
-  directory: /
-  schedule:
-    interval: weekly
-    time: "06:00"
-    day: sunday
-  commit-message:
-    prefix: chore
-    include: scope
+  - package-ecosystem: github-actions
+    directory: /
+    schedule:
+      interval: daily
+    commit-message:
+      prefix: ci
+      include: scope
+  - package-ecosystem: gomod
+    directory: /
+    schedule:
+      interval: weekly
+      time: "06:00"
+      day: sunday
+    commit-message:
+      prefix: chore
+      include: scope
diff --git a/.github/workflows/branch_clean.yaml b/.github/workflows/branch_clean.yaml
@@ -1,6 +1,18 @@
 ---
 name: Git
 
+permissions:
+  actions: none
+  checks: none
+  contents: none
+  deployments: none
+  issues: none
+  packages: none
+  pages: none
+  pull-requests: none
+  repository-projects: none
+  security-events: none
+
 on:
   - pull_request
 

diff --git a/.github/workflows/build.yaml b/.github/workflows/build.yaml
@@ -1,6 +1,18 @@
 ---
 name: Build
 
+permissions:
+  actions: none
+  checks: none
+  contents: none
+  deployments: none
+  issues: none
+  packages: none
+  pages: none
+  pull-requests: none
+  repository-projects: none
+  security-events: none
+
 on:
   push:
     branches:
@@ -24,7 +36,7 @@ jobs:
       - name: Checkout
         uses: actions/checkout@v2
       - name: Setup Golang
-        uses: actions/setup-go@v2
+        uses: actions/setup-go@v3
         with:
           go-version: "^1.18"
       - name: golangci-lint
@@ -58,21 +70,21 @@ jobs:
       - name: Checkout
         uses: actions/checkout@v2
       - name: Setup Golang
-        uses: actions/setup-go@v2
+        uses: actions/setup-go@v3
         with:
           go-version: "^1.18"
       - name: Build
         run: |
           curl --disable --silent --show-error --location --max-time 30 "https://raw.githubusercontent.com/ViBiOh/scripts/main/bootstrap" | bash -s -- "-c" "release"
           ./scripts/release build
       - name: Setup Docker
-        uses: docker/setup-buildx-action@v1
+        uses: docker/setup-buildx-action@v2
       - name: Setup DockerHub
         if: env.DOCKER_USER && env.DOCKER_PASS
         env:
           DOCKER_USER: ${{ secrets.DOCKER_USER }}
           DOCKER_PASS: ${{ secrets.DOCKER_PASS }}
-        uses: docker/login-action@v1
+        uses: docker/login-action@v2
         with:
           username: ${{ secrets.DOCKER_USER }}
           password: ${{ secrets.DOCKER_PASS }}

diff --git a/.github/workflows/codeql-analysis.yaml b/.github/workflows/codeql-analysis.yaml
@@ -1,6 +1,18 @@
 ---
 name: CodeQL
 
+permissions:
+  actions: none
+  checks: none
+  contents: none
+  deployments: none
+  issues: none
+  packages: none
+  pages: none
+  pull-requests: none
+  repository-projects: none
+  security-events: write
+
 on:
   push:
     branches:
@@ -24,11 +36,11 @@ jobs:
       - name: Checkout
         uses: actions/checkout@v2
       - name: Setup CodeQL
-        uses: github/codeql-action/init@v1
+        uses: github/codeql-action/init@v2
         with:
           languages: ${{ matrix.language }}
       - name: Setup Golang
-        uses: actions/setup-go@v2
+        uses: actions/setup-go@v3
         with:
           go-version: "^1.18"
       - name: Build

diff --git a/.github/workflows/herodote.yaml b/.github/workflows/herodote.yaml
@@ -1,6 +1,18 @@
 ---
 name: Herodote
 
+permissions:
+  actions: none
+  checks: none
+  contents: none
+  deployments: none
+  issues: none
+  packages: none
+  pages: none
+  pull-requests: none
+  repository-projects: none
+  security-events: none
+
 on:
   push:
     branches:

diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
@@ -1,6 +1,18 @@
 ---
 name: Release
 
+permissions:
+  actions: none
+  checks: none
+  contents: write
+  deployments: none
+  issues: none
+  packages: none
+  pages: none
+  pull-requests: none
+  repository-projects: none
+  security-events: none
+
 on:
   release:
     types:
@@ -21,7 +33,7 @@ jobs:
       - name: Checkout
         uses: actions/checkout@v2
       - name: Setup Golang
-        uses: actions/setup-go@v2
+        uses: actions/setup-go@v3
         with:
           go-version: "^1.18"
       - name: Build