chore: apply ci hardening

Signed-off-by: StepSecurity Bot <bot@stepsecurity.io>
elide-dev · Apr 16, 2024 · d61d395 · d61d395
1 parent fec13c4
commit d61d395
Show file tree

Hide file tree

Showing 3 changed files with 30 additions and 1 deletion.
diff --git a/.github/dependabot.yml b/.github/dependabot.yml
@@ -29,3 +29,28 @@ updates:
     directory: /containers/node
     schedule:
       interval: daily
+
+  - package-ecosystem: docker
+    directory: /containers/bazel
+    schedule:
+      interval: daily
+
+  - package-ecosystem: docker
+    directory: /containers/bun
+    schedule:
+      interval: daily
+
+  - package-ecosystem: docker
+    directory: /containers/deno
+    schedule:
+      interval: daily
+
+  - package-ecosystem: docker
+    directory: /containers/elide
+    schedule:
+      interval: daily
+
+  - package-ecosystem: docker
+    directory: /containers/rbe
+    schedule:
+      interval: daily
diff --git a/.github/workflows/container.yml b/.github/workflows/container.yml
@@ -187,7 +187,7 @@ jobs:
             username: ${{ github.actor }}
             password: ${{ secrets.GITHUB_TOKEN }}
         - name: "Setup: Container Cache"
-          uses: reproducible-containers/buildkit-cache-dance@v2.1.2
+          uses: reproducible-containers/buildkit-cache-dance@47a61eb1db5c76da4d93c7d3b05b9d12d4ca340b # v2.1.2
           if: inputs.cache_source != ''
           with:
             cache-source: ${{ inputs.cache_source }}

diff --git a/.pre-commit-config.yaml b/.pre-commit-config.yaml
@@ -8,3 +8,7 @@ repos:
   hooks:
   - id: end-of-file-fixer
   - id: trailing-whitespace
+- repo: https://github.com/gherynos/pre-commit-java
+  rev: v0.2.4
+  hooks:
+  - id: Checkstyle