Update workflows

.github/workflows/codesee-arch-diagram.yml

@@ -1,12 +1,18 @@
+# This workflow was added by CodeSee. Learn more at https://codesee.io/
 on:
   push:
     branches:
       - main
   pull_request_target:
-    types: [opened, synchronize, reopened]
+    types:
+      - opened
+      - synchronize
+      - reopened
 
 name: CodeSee Map
 
+permissions: read-all
+
 jobs:
   test_map_action:
     runs-on: ubuntu-latest
@@ -54,13 +60,19 @@ jobs:
         with:
           ruby-version: '3.0'
 
-      # CodeSee Maps Rust support uses a static binary so there's no setup step required.
+      # We need the rust toolchain because it uses rustc and cargo to inspect the package
+      - name: Configure Rust 1.x stable
+        uses: actions-rs/toolchain@v1
+        if: ${{ fromJSON(steps.detect-languages.outputs.languages).rust }}
+        with:
+          toolchain: stable
 
       - name: Generate Map
         id: generate-map
         uses: Codesee-io/codesee-map-action@latest
         with:
           step: map
+          api_token: ${{ secrets.CODESEE_ARCH_DIAG_API_TOKEN }}
           github_ref: ${{ github.ref }}
           languages: ${{ steps.detect-languages.outputs.languages }}
 
@@ -71,11 +83,11 @@ jobs:
           step: mapUpload
           api_token: ${{ secrets.CODESEE_ARCH_DIAG_API_TOKEN }}
           github_ref: ${{ github.ref }}
-      
+
       - name: Insights
         id: insights
         uses: Codesee-io/codesee-map-action@latest
         with:
           step: insights
           api_token: ${{ secrets.CODESEE_ARCH_DIAG_API_TOKEN }}
-          github_ref: ${{ github.ref }}
+          github_ref: ${{ github.ref }}

.github/workflows/dependabot-auto-merge.yml

@@ -1,4 +1,5 @@
-name: Dependabot auto-merge
+name: Dependabot Auto-Merge
+
 on: pull_request
 
 permissions:

.github/workflows/snyk.yml

@@ -1,9 +1,6 @@
 name: "Snyk: Node"
-on:
-  push:
-    branches:
-      - main
-  pull_request:
+
+on: push
 
 permissions: write-all
 
@@ -14,7 +11,7 @@ jobs:
     steps:
       - uses: actions/checkout@v3
       - name: Snyk Scan
-        uses: snyk/actions/node@0.3.0
+        uses: snyk/actions/node@master
         continue-on-error: true
         env:
           SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}

.github/workflows/sonarcloud.yml

@@ -1,7 +1,14 @@
 name: SonarCloud Analysis
 
 on:
-  pull_request:
+  push:
+    branches:
+      - main
+  pull_request_target:
+    types:
+      - opened
+      - synchronize
+      - reopened
 
 permissions:
   pull-requests: read
@@ -12,7 +19,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Analyze
-        uses: SonarSource/sonarcloud-github-action@v1.7
+        uses: SonarSource/sonarcloud-github-action@master
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
           SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}

beta/workflows/beta-compile.yml

@@ -1,7 +1,6 @@
 name: Beta Compile
 
-on:
-  pull_request:
+on: pull_request
 
 jobs:
   build: