Increase heading margin in Markdown (#1443)

* Increase heading margin in Markdown

* Add Github workflow permissions

* Update dependencies

Author: kshmidt-digma

.github/workflows/build.yml

@@ -12,6 +12,9 @@ on:
 
 jobs:
   build:
+    permissions:
+      contents: read
+      actions: write
     runs-on: ubuntu-latest
     outputs:
       artifact-name: ${{ steps.get-artifact-name.outputs.artifact_name }}
@@ -26,7 +29,7 @@ jobs:
       - run: npm ci
 
       - env:
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          GITHUB_TOKEN: ${{ secrets.CONTENTS_WRITE_PAT }}
         run: npm run build:prod:${{ inputs.platform }}
 
       - name: Get artifact name

.github/workflows/bump.yml

@@ -18,6 +18,8 @@ on:
 
 jobs:
   bump:
+    permissions:
+      contents: write
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v4

.github/workflows/docker-image.yml

@@ -12,6 +12,9 @@ on:
 
 jobs:
   build:
+    permissions:
+      contents: read
+      actions: write
     runs-on: ubuntu-latest
 
     steps:

.github/workflows/lint-test.yml

@@ -5,6 +5,8 @@ on:
 
 jobs:
   build:
+    permissions:
+      contents: read
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v4

.github/workflows/push.yml

@@ -12,8 +12,6 @@ on:
       - ".husky/**"
       - ".vscode/**"
       - "website/**"
-      - ".prettierignore"
-      - ".prettierrc"
       - "LICENSE"
       - "README.md"
   pull_request:
@@ -24,39 +22,51 @@ on:
       - ".husky/**"
       - ".vscode/**"
       - "website/**"
-      - ".prettierignore"
-      - ".prettierrc"
       - "LICENSE"
       - "README.md"
 
 jobs:
   lint-test:
+    permissions:
+      contents: read
     name: Lint & test
     uses: ./.github/workflows/lint-test.yml
 
   build-jetbrains:
     name: Build for JetBrains
+    permissions:
+      contents: read
+      actions: write
     needs: lint-test
     uses: ./.github/workflows/build.yml
     with:
       platform: "jetbrains"
 
   build-vs:
     name: Build for Visual Studio
+    permissions:
+      contents: read
+      actions: write
     needs: lint-test
     uses: ./.github/workflows/build.yml
     with:
       platform: "vs"
 
   build-web:
     name: Build for web
+    permissions:
+      contents: read
+      actions: write
     needs: lint-test
     uses: ./.github/workflows/build.yml
     with:
       platform: "web"
 
   build-docker-image:
     name: Build Docker image
+    permissions:
+      contents: read
+      actions: write
     needs: [build-jetbrains, build-vs, build-web]
     if: github.actor != 'dependabot[bot]'
     uses: ./.github/workflows/docker-image.yml

.github/workflows/release-asset.yml

@@ -7,11 +7,11 @@ on:
         type: string
         required: true
 
-permissions:
-  contents: write
-
 jobs:
   attach:
+    permissions:
+      contents: write
+      actions: read
     runs-on: ubuntu-latest
     steps:
       - uses: actions/download-artifact@v4
@@ -27,4 +27,4 @@ jobs:
         with:
           files: dist/${{ inputs.artifact-name }}.zip
         env:
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          GITHUB_TOKEN: ${{ secrets.CONTENTS_WRITE_PAT }}

.github/workflows/release.yml

@@ -5,58 +5,78 @@ on:
   release:
     types: [prereleased, released]
 
-permissions:
-  contents: write
-
 jobs:
   lint-test:
     name: Lint & test
+    permissions:
+      contents: read
     uses: ./.github/workflows/lint-test.yml
 
   build-jetbrains:
     name: Build for JetBrains
+    permissions:
+      contents: read
+      actions: write
     needs: lint-test
     uses: ./.github/workflows/build.yml
     with:
       platform: "jetbrains"
 
   attach-release-jetbrains-asset:
     name: Attach release JetBrains asset
+    permissions:
+      contents: write
+      actions: read
     needs: build-jetbrains
     uses: ./.github/workflows/release-asset.yml
     with:
       artifact-name: ${{ needs.build-jetbrains.outputs.artifact-name }}
 
   build-vs:
     name: Build for Visual Studio
+    permissions:
+      contents: read
+      actions: write
     needs: lint-test
     uses: ./.github/workflows/build.yml
     with:
       platform: "vs"
 
   attach-release-vs-asset:
     name: Attach release Visual Studio asset
+    permissions:
+      contents: write
+      actions: read
     needs: build-vs
     uses: ./.github/workflows/release-asset.yml
     with:
       artifact-name: ${{ needs.build-vs.outputs.artifact-name }}
 
   build-web:
     name: Build for web
+    permissions:
+      contents: read
+      actions: write
     needs: lint-test
     uses: ./.github/workflows/build.yml
     with:
       platform: "web"
 
   attach-release-web-asset:
     name: Attach release web asset
+    permissions:
+      contents: write
+      actions: read
     needs: build-web
     uses: ./.github/workflows/release-asset.yml
     with:
       artifact-name: ${{ needs.build-web.outputs.artifact-name }}
 
   build-push-docker-image:
     name: Build & push Docker image
+    permissions:
+      contents: read
+      actions: write
     needs: [build-jetbrains, "build-vs", build-web]
     uses: ./.github/workflows/docker-image.yml
     secrets: inherit
@@ -66,6 +86,9 @@ jobs:
 
   update-digma:
     name: Update UI releases in digma
+    permissions:
+      contents: read
+      actions: write
     needs:
       [
         attach-release-jetbrains-asset,

.github/workflows/update-dependencies.yml

@@ -6,6 +6,8 @@ on:
 
 jobs:
   update-dependencies:
+    permissions:
+      contents: write
     runs-on: ubuntu-latest
     env:
       BRANCH_NAME: update-dependencies