Merge pull request #298 from github/jm_reintroduce_major_version_updater_workflow

chore: add major version updater workflow back

Author: jmeridth

.github/linters/.checkov.yaml

@@ -0,0 +1,5 @@
+quiet: true
+skip-check:
+  - CKV_GHA_7
+  - CKV_DOCKER_2
+  - CKV_DOCKER_3

.github/workflows/major-version-updater.yml

@@ -0,0 +1,24 @@
+name: Update major tag for release
+on:
+  release:
+    types: [released]
+  workflow_dispatch:
+    inputs:
+      TAG_NAME:
+        description: "Tag name that the major tag will point to (e.g. v1.2.3)"
+        required: true
+env:
+  TAG_NAME: ${{ github.event.inputs.TAG_NAME || github.event.release.tag_name }}
+permissions:
+  contents: read
+jobs:
+  update_tag:
+    permissions:
+      contents: write
+    name: Update the major tag to include the ${{ github.event.inputs.TAG_NAME || github.event.release.tag_name }} changes
+    runs-on: ubuntu-latest
+    steps:
+      - name: Update the ${{ env.TAG_NAME }} tag
+        uses: actions/publish-action@8a4b4f687b72f481b8a241ef71f38857239698fc
+        with:
+          source-tag: ${{ env.TAG_NAME }}

Dockerfile

@@ -1,5 +1,3 @@
-#checkov:skip=CKV_DOCKER_2
-#checkov:skip=CKV_DOCKER_3
 FROM python:3.13-slim@sha256:8f3aba466a471c0ab903dbd7cb979abd4bda370b04789d25440cc90372b50e04
 LABEL com.github.actions.name="stale-repos" \
     com.github.actions.description="Find stale repositories in a GitHub organization." \