From ae1f95fc48fdf118fffaa418b75a0331109c5cf7 Mon Sep 17 00:00:00 2001
From: Vincent Boutour <bob@vibioh.fr>
Date: Sat, 25 Jun 2022 17:12:05 +0200
Subject: [PATCH] ci: Adding dependabot and bumping version prior

Signed-off-by: Vincent Boutour <bob@vibioh.fr>
---
 .github/dependabot.yaml                | 25 ++++++++++++++++---------
 .github/workflows/branch_clean.yaml    | 12 ++++++++++++
 .github/workflows/build.yaml           | 20 ++++++++++++++++----
 .github/workflows/codeql-analysis.yaml | 16 ++++++++++++++--
 .github/workflows/herodote.yaml        | 12 ++++++++++++
 .github/workflows/release.yaml         | 14 +++++++++++++-
 6 files changed, 83 insertions(+), 16 deletions(-)

diff --git a/.github/dependabot.yaml b/.github/dependabot.yaml
index 63e31144..30c2dbff 100644
--- a/.github/dependabot.yaml
+++ b/.github/dependabot.yaml
@@ -1,11 +1,18 @@
 version: 2
 updates:
-- package-ecosystem: gomod
-  directory: /
-  schedule:
-    interval: weekly
-    time: "06:00"
-    day: sunday
-  commit-message:
-    prefix: chore
-    include: scope
+  - package-ecosystem: github-actions
+    directory: /
+    schedule:
+      interval: daily
+    commit-message:
+      prefix: ci
+      include: scope
+  - package-ecosystem: gomod
+    directory: /
+    schedule:
+      interval: weekly
+      time: "06:00"
+      day: sunday
+    commit-message:
+      prefix: chore
+      include: scope
diff --git a/.github/workflows/branch_clean.yaml b/.github/workflows/branch_clean.yaml
index 51cb4e26..d1a2bec3 100644
--- a/.github/workflows/branch_clean.yaml
+++ b/.github/workflows/branch_clean.yaml
@@ -1,6 +1,18 @@
 ---
 name: Git
 
+permissions:
+  actions: none
+  checks: none
+  contents: none
+  deployments: none
+  issues: none
+  packages: none
+  pages: none
+  pull-requests: none
+  repository-projects: none
+  security-events: none
+
 on:
   - pull_request
 
diff --git a/.github/workflows/build.yaml b/.github/workflows/build.yaml
index 2aa77005..b6d33490 100644
--- a/.github/workflows/build.yaml
+++ b/.github/workflows/build.yaml
@@ -1,6 +1,18 @@
 ---
 name: Build
 
+permissions:
+  actions: none
+  checks: none
+  contents: none
+  deployments: none
+  issues: none
+  packages: none
+  pages: none
+  pull-requests: none
+  repository-projects: none
+  security-events: none
+
 on:
   push:
     branches:
@@ -24,7 +36,7 @@ jobs:
       - name: Checkout
         uses: actions/checkout@v2
       - name: Setup Golang
-        uses: actions/setup-go@v2
+        uses: actions/setup-go@v3
         with:
           go-version: "^1.18"
       - name: golangci-lint
@@ -58,7 +70,7 @@ jobs:
       - name: Checkout
         uses: actions/checkout@v2
       - name: Setup Golang
-        uses: actions/setup-go@v2
+        uses: actions/setup-go@v3
         with:
           go-version: "^1.18"
       - name: Build
@@ -66,13 +78,13 @@ jobs:
           curl --disable --silent --show-error --location --max-time 30 "https://raw.githubusercontent.com/ViBiOh/scripts/main/bootstrap" | bash -s -- "-c" "release"
           ./scripts/release build
       - name: Setup Docker
-        uses: docker/setup-buildx-action@v1
+        uses: docker/setup-buildx-action@v2
       - name: Setup DockerHub
         if: env.DOCKER_USER && env.DOCKER_PASS
         env:
           DOCKER_USER: ${{ secrets.DOCKER_USER }}
           DOCKER_PASS: ${{ secrets.DOCKER_PASS }}
-        uses: docker/login-action@v1
+        uses: docker/login-action@v2
         with:
           username: ${{ secrets.DOCKER_USER }}
           password: ${{ secrets.DOCKER_PASS }}
diff --git a/.github/workflows/codeql-analysis.yaml b/.github/workflows/codeql-analysis.yaml
index be8efd8d..f5373100 100644
--- a/.github/workflows/codeql-analysis.yaml
+++ b/.github/workflows/codeql-analysis.yaml
@@ -1,6 +1,18 @@
 ---
 name: CodeQL
 
+permissions:
+  actions: none
+  checks: none
+  contents: none
+  deployments: none
+  issues: none
+  packages: none
+  pages: none
+  pull-requests: none
+  repository-projects: none
+  security-events: write
+
 on:
   push:
     branches:
@@ -24,11 +36,11 @@ jobs:
       - name: Checkout
         uses: actions/checkout@v2
       - name: Setup CodeQL
-        uses: github/codeql-action/init@v1
+        uses: github/codeql-action/init@v2
         with:
           languages: ${{ matrix.language }}
       - name: Setup Golang
-        uses: actions/setup-go@v2
+        uses: actions/setup-go@v3
         with:
           go-version: "^1.18"
       - name: Build
diff --git a/.github/workflows/herodote.yaml b/.github/workflows/herodote.yaml
index e9fd5965..7798e284 100644
--- a/.github/workflows/herodote.yaml
+++ b/.github/workflows/herodote.yaml
@@ -1,6 +1,18 @@
 ---
 name: Herodote
 
+permissions:
+  actions: none
+  checks: none
+  contents: none
+  deployments: none
+  issues: none
+  packages: none
+  pages: none
+  pull-requests: none
+  repository-projects: none
+  security-events: none
+
 on:
   push:
     branches:
diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
index a893dd79..b3e3b5eb 100644
--- a/.github/workflows/release.yaml
+++ b/.github/workflows/release.yaml
@@ -1,6 +1,18 @@
 ---
 name: Release
 
+permissions:
+  actions: none
+  checks: none
+  contents: write
+  deployments: none
+  issues: none
+  packages: none
+  pages: none
+  pull-requests: none
+  repository-projects: none
+  security-events: none
+
 on:
   release:
     types:
@@ -21,7 +33,7 @@ jobs:
       - name: Checkout
         uses: actions/checkout@v2
       - name: Setup Golang
-        uses: actions/setup-go@v2
+        uses: actions/setup-go@v3
         with:
           go-version: "^1.18"
       - name: Build