super-linterアップデート (#921)

* Update super-linter/super-linter action to v6

* Set DEFAULT_BRANCH

* super-linterによる指摘事項修正

---------

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

Author: massongit

.github/workflows/add-to-task-list.yml

@@ -7,6 +7,7 @@ on:
   issues:
     types:
       - opened
+permissions: read-all
 jobs:
   add-to-task-list:
     runs-on: ubuntu-latest

.github/workflows/codeql.yml

@@ -17,6 +17,10 @@ on:
     branches: ["main"]
   schedule:
     - cron: '15 7 * * 2'
+permissions:
+  actions: read
+  contents: read
+  security-events: write
 jobs:
   analyze:
     name: Analyze
@@ -27,10 +31,6 @@ jobs:
     # Consider using larger runners for possible analysis time improvements.
     runs-on: ${{ (matrix.language == 'swift' && 'macos-latest') || 'ubuntu-latest' }}
     timeout-minutes: ${{ (matrix.language == 'swift' && 120) || 360 }}
-    permissions:
-      actions: read
-      contents: read
-      security-events: write
     strategy:
       fail-fast: false
       matrix:

.github/workflows/create-release.yml

@@ -8,6 +8,8 @@ on:
       - .github/workflows/create-release.yml
       - scripts/action/**
       - action.yml
+permissions:
+  contents: write
 jobs:
   create-release:
     runs-on: ubuntu-latest

.github/workflows/github-actions-cache-cleaner.yml

@@ -12,6 +12,7 @@ on:
       - .github/workflows/github-actions-cache-cleaner.yml
       - scripts/action/**
       - action.yml
+permissions: read-all
 jobs:
   github-actions-cache-cleaner:
     runs-on: ubuntu-latest

.github/workflows/super-linter.yml

@@ -18,6 +18,10 @@ on:
     branches:
       - main
   pull_request:
+permissions:
+  contents: read
+  packages: read
+  statuses: write
 ###############
 # Set the Job #
 ###############
@@ -48,9 +52,10 @@ jobs:
       # Run Linter against code base #
       ################################
       - name: Lint Code Base
-        uses: super-linter/super-linter/slim@v5.7.2
+        uses: super-linter/super-linter/slim@v6.0.0
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          DEFAULT_BRANCH: main
           LINTER_RULES_PATH: .
 concurrency:
   group: ${{ github.workflow }}-${{ github.event_name }}-${{ github.ref }}

.github/workflows/update-package.yml

@@ -10,13 +10,13 @@ on:
   push:
     branches:
       - main
+permissions:
+  contents: write
+  pull-requests: write
 jobs:
   # npm installを実行し、package.jsonやpackage-lock.jsonに差分があればPRを作る
   update-package:
     runs-on: ubuntu-latest
-    permissions:
-      contents: write
-      pull-requests: write
     steps:
       - uses: actions/[email protected]
         if: github.event_name != 'pull_request' || github.event.action != 'closed'

.github/workflows/update-readme.yml

@@ -10,12 +10,12 @@ on:
   push:
     branches:
       - main
+permissions:
+  contents: write
+  pull-requests: write
 jobs:
   update-readme:
     runs-on: ubuntu-latest
-    permissions:
-      contents: write
-      pull-requests: write
     steps:
       - uses: actions/[email protected]
         if: github.event_name != 'pull_request' || github.event.action != 'closed'

scripts/super_linter/build/set_path.sh

@@ -3,4 +3,4 @@
 npm ci
 action="$(yq '.jobs.build.steps[-1].uses' .github/workflows/super-linter.yml)"
 PATH="$(docker run --rm --entrypoint '' "ghcr.io/${action//\/slim@/:slim-}" /bin/sh -c 'echo $PATH')"
-echo "PATH=/github/workspace/node_modules/.bin:${PATH}" >> "$GITHUB_ENV"
+echo "PATH=/github/workspace/node_modules/.bin:${PATH}" >>"$GITHUB_ENV"

scripts/update_readme/update_readme/update_readme.sh

@@ -2,4 +2,4 @@
 
 DESCRIPTION="$(yq '.description' action.yml)"
 export DESCRIPTION
-envsubst < README.template.md > README.md
+envsubst <README.template.md >README.md