diff --git a/.github/workflows/links.yml b/.github/workflows/links.yml index c635541..09123ea 100644 --- a/.github/workflows/links.yml +++ b/.github/workflows/links.yml @@ -17,7 +17,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1 + uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4.1.4 - name: Setup Pages id: pages @@ -33,7 +33,7 @@ jobs: - name: Link Checker env: GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} - uses: lycheeverse/lychee-action@c053181aa0c3d17606addfe97a9075a32723548a # v1.9.3 + uses: lycheeverse/lychee-action@2b973e86fc7b1f6b36a93795fe2c9c6ae1118621 # v1.10.0 with: args: ". --exclude-path CHANGELOG.md ${{ steps.pages.outputs.base_url }}" fail: true diff --git a/.github/workflows/renovate.yml b/.github/workflows/renovate.yml index dbbfada..e8a92c0 100644 --- a/.github/workflows/renovate.yml +++ b/.github/workflows/renovate.yml @@ -45,9 +45,10 @@ jobs: runs-on: ubuntu-latest concurrency: group: ${{ github.workflow }}-${{ github.ref }} + permissions: write-all steps: - name: Checkout - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1 + uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4.1.4 - uses: actions/create-github-app-token@7bfa3a4717ef143a604ee0a99d859b8886a96d00 # v1.9.3 id: app-token @@ -56,6 +57,6 @@ jobs: private-key: ${{ secrets.MY_RENOVATE_GITHUB_PRIVATE_KEY }} - name: 💡 Self-hosted Renovate - uses: renovatebot/github-action@8f6b0f762415909f60b0efb1817c4dee029ea806 # v40.1.1 + uses: renovatebot/github-action@89bd050bafa5a15de5d9383e3129edf210422004 # v40.1.5 with: token: ${{ steps.app-token.outputs.token }} diff --git a/.github/workflows/vuepress-build.yml b/.github/workflows/vuepress-build.yml index fe2a582..be5a013 100644 --- a/.github/workflows/vuepress-build.yml +++ b/.github/workflows/vuepress-build.yml @@ -19,7 +19,7 @@ jobs: concurrency: group: ${{ github.workflow }}-${{ github.ref }} steps: - - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1 + - uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4.1.4 - name: Install Node.js uses: actions/setup-node@60edb5dd545a775178f52524783378180af0d1f8 # v4.0.2 @@ -43,7 +43,7 @@ jobs: with: url: ${{ steps.pages.outputs.base_url }} pages_path: . - cmd_params: '--exclude=(mylabs.dev|localhost|stackoverflow.com) --buffer-size=8192 --max-connections-per-host=5 --color=always --rate-limit=5 --header="User-Agent:Mozilla" --skip-tls-verification' + cmd_params: '--exclude=(mylabs.dev|localhost|stackoverflow.com) --buffer-size=8192 --ignore-fragments --max-connections-per-host=5 --color=always --rate-limit=5 --header="User-Agent:Mozilla" --skip-tls-verification' - name: Deploy uses: peaceiris/actions-gh-pages@4f9cc6602d3f66b9c108549d475ec49e8ef4d45e # v4.0.0 diff --git a/.mega-linter.yml b/.mega-linter.yml index 24bf598..493531b 100644 --- a/.mega-linter.yml +++ b/.mega-linter.yml @@ -33,7 +33,7 @@ REPOSITORY_DEVSKIM_ARGUMENTS: --ignore-globs CHANGELOG.md --ignore-rule-ids DS16 REPOSITORY_KICS_ARGUMENTS: --fail-on high -REPOSITORY_TRIVY_ARGUMENTS: --ignorefile .trivyignore.yaml --severity HIGH,CRITICAL +REPOSITORY_TRIVY_ARGUMENTS: --ignorefile .trivyignore.yaml --severity HIGH,CRITICAL --ignore-unfixed TERRAFORM_TFLINT_UNSECURED_ENV_VARIABLES: - GITHUB_TOKEN