Bump github/super-linter from 4 to 7

.github/workflows/build.yml

@@ -4,6 +4,9 @@ on:
   pull_request:
   workflow_dispatch:
 
+permissions:
+  contents: read
+
 jobs:
   build:
     timeout-minutes: 15
@@ -12,19 +15,19 @@ jobs:
       run:
         working-directory: ./frontend
     steps:
-    - uses: actions/checkout@v4
-    - uses: pnpm/action-setup@v4
-      name: Install pnpm
-      with:
-        version: 10
-        run_install: false
-    - name: Install Node.js
-      uses: actions/setup-node@v5
-      with:
-        node-version: 22
-        cache: 'pnpm'
-        cache-dependency-path: 'frontend/pnpm-lock.yaml'
-    - name: Install dependencies
-      run: pnpm i
-    - name: Build project
-      run: pnpm run build
+      - uses: actions/checkout@v4
+      - uses: pnpm/action-setup@v4
+        name: Install pnpm
+        with:
+          version: 10
+          run_install: false
+      - name: Install Node.js
+        uses: actions/setup-node@v5
+        with:
+          node-version: 22
+          cache: "pnpm"
+          cache-dependency-path: "frontend/pnpm-lock.yaml"
+      - name: Install dependencies
+        run: pnpm i
+      - name: Build project
+        run: pnpm run build

.github/workflows/playwright.yml

@@ -1,11 +1,14 @@
 name: Playwright Tests
 on:
   push:
-    branches: [ main ]
+    branches: ["main"]
   pull_request:
-    branches: [ main ]
+    branches: ["main"]
   workflow_dispatch:
 
+permissions:
+  contents: read
+
 jobs:
   test:
     timeout-minutes: 60
@@ -14,27 +17,27 @@ jobs:
       run:
         working-directory: ./frontend
     steps:
-    - uses: actions/checkout@v5
-    - uses: pnpm/action-setup@v4
-      name: Install pnpm
-      with:
-        version: 10
-        run_install: false
-    - name: Install Node.js
-      uses: actions/setup-node@v5
-      with:
-        node-version: 22
-        cache: 'pnpm'
-        cache-dependency-path: 'frontend/pnpm-lock.yaml'
-    - name: Install dependencies
-      run: pnpm i
-    - name: Install Playwright Browsers
-      run: pnpm exec playwright install --with-deps
-    - name: Run Playwright tests
-      run: pnpm test
-    - uses: actions/upload-artifact@v4
-      if: ${{ !cancelled() }}
-      with:
-        name: playwright-report
-        path: playwright-report/
-        retention-days: 30
+      - uses: actions/checkout@v5
+      - uses: pnpm/action-setup@v4
+        name: Install pnpm
+        with:
+          version: 10
+          run_install: false
+      - name: Install Node.js
+        uses: actions/setup-node@v5
+        with:
+          node-version: 22
+          cache: "pnpm"
+          cache-dependency-path: "frontend/pnpm-lock.yaml"
+      - name: Install dependencies
+        run: pnpm i
+      - name: Install Playwright Browsers
+        run: pnpm exec playwright install --with-deps
+      - name: Run Playwright tests
+        run: pnpm test
+      - uses: actions/upload-artifact@v4
+        if: ${{ !cancelled() }}
+        with:
+          name: playwright-report
+          path: playwright-report/
+          retention-days: 30

.github/workflows/super-linter.yml

@@ -6,6 +6,10 @@
 # https://github.com/github/super-linter
 name: Lint Code Base
 
+permissions:
+  contents: read
+  statuses: write
+  checks: write
 on:
   push:
     branches: [ "main" ]
@@ -22,8 +26,8 @@ jobs:
           fetch-depth: 0
 
       - name: Lint Code Base
-        uses: github/super-linter@v4
+        uses: github/super-linter@v7
         env:
           VALIDATE_ALL_CODEBASE: false
           DEFAULT_BRANCH: "main"
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          GITHUB_TOKEN: ${{ github.token }}

.jscpd.json

@@ -0,0 +1,4 @@
+{
+	"threshold": 2,
+	"ignore": ["**/node_modules/**", "**/dist/**", "**/frontend/tests/**"]
+}

Dockerfile

@@ -31,6 +31,13 @@ RUN rm /etc/nginx/conf.d/default.conf
 # Copy your custom nginx config
 COPY ./nginx/conf/nginx.conf /etc/nginx/conf.d/default.conf
 
-EXPOSE 80 443
+RUN chown -R nginx:nginx /var/cache/nginx /var/run /var/log/nginx /usr/share/nginx/html
+
+USER nginx
+
+EXPOSE 8080
+
+HEALTHCHECK --interval=30s --timeout=3s --start-period=10s --retries=3 \
+  CMD wget -qO- http://127.0.0.1:8080/ || exit 1
 
 CMD ["nginx", "-g", "daemon off;"]

nginx/conf/nginx.conf

@@ -1,5 +1,5 @@
 server {
-    listen 80;
+    listen 8080;
     server_name localhost;
 
     root /usr/share/nginx/html;