ghactions update

commit_hash:ab1bc1aad7564781dbc3788af8b01c525f4c13ba

Author: kabachook

.github/workflows/lint.yml

@@ -1,4 +1,8 @@
 name: Lint
+
+permissions:
+  contents: read
+
 on:
   push:
     branches:
@@ -20,5 +24,5 @@ jobs:
       - name: golangci-lint
         uses: golangci/golangci-lint-action@v6
         with:
-          version: v1.58.2
+          version: v1.63.4
           args: --timeout=10m

.github/workflows/release.yml

@@ -1,5 +1,9 @@
 name: Release plugin
 
+permissions:
+  attestations: write
+  id-token: write
+
 on:
   push:
     tags:
@@ -20,19 +24,22 @@ jobs:
         with:
           fetch-depth: 0
 
-      - name: Setup Go 1.x
-        uses: actions/setup-go@v5
+      - uses: actions/setup-go@v5
         with:
           go-version-file: go.mod
+      - uses: anchore/sbom-action/download-syft@v0.18.0 # installs syft
 
       - name: Install GoReleaser & publish
-        uses: goreleaser/goreleaser-action@v5
+        uses: goreleaser/goreleaser-action@v6
         with:
           distribution: goreleaser
-          version: latest
+          version: "~> v2"
           args: release --clean
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+      - uses: actions/attest-build-provenance@v2
+        with:
+          subject-checksums: ./dist/checksums.txt
 
   release-hub:
     name: Publish to CloudQuery Hub
@@ -60,9 +67,9 @@ jobs:
           go-version-file: go.mod
 
       - name: Setup CloudQuery
-        uses: cloudquery/setup-cloudquery@v3
+        uses: cloudquery/setup-cloudquery@v4
         with:
-          version: v5.20.3
+          version: v6.15.1
 
       - name: Parse and validate semver tag
         id: semver-tag

.github/workflows/test.yml

@@ -1,4 +1,8 @@
 name: "Unit tests"
+
+permissions:
+  contents: read
+
 on:
   push:
     branches:

.goreleaser.yaml

@@ -1,3 +1,5 @@
+version: 2
+
 before:
   hooks:
     - "go mod download"
@@ -21,9 +23,11 @@ builds:
       - goos: windows
         goarch: arm64
 
+sboms:
+  - artifacts: archive
+
 archives:
-  - format: zip
-    name_template: "{{ .Binary }}_{{ .Os }}_{{ .Arch }}"
+  - formats: ["zip"]
 
 checksum:
   name_template: "checksums.txt"

.mapping.json

@@ -1,4 +1,5 @@
 {
+  "":"security/cloudquery/cq-source-yc",
   ".":"security/cloudquery/github_toplevel/cq-source-yc",
   ".github/workflows/lint.yml":"security/cloudquery/github_toplevel/cq-source-yc/.github/workflows/lint.yml",
   ".github/workflows/release.yml":"security/cloudquery/github_toplevel/cq-source-yc/.github/workflows/release.yml",
@@ -7,7 +8,7 @@
   ".goreleaser.yaml":"security/cloudquery/github_toplevel/cq-source-yc/.goreleaser.yaml",
   "AUTHORS":"security/cloudquery/github_toplevel/cq-source-yc/AUTHORS",
   "CHANGELOG.md":"security/cloudquery/github_toplevel/cq-source-yc/CHANGELOG.md",
-  "CONTRIBUTING":"security/cloudquery/github_toplevel/cq-source-yc/CONTRIBUTING",
+  "CONTRIBUTING.md":"security/cloudquery/github_toplevel/cq-source-yc/CONTRIBUTING.md",
   "LICENSE":"security/cloudquery/github_toplevel/cq-source-yc/LICENSE",
   "Makefile":"security/cloudquery/cq-source-yc/Makefile",
   "README.md":"security/cloudquery/cq-source-yc/README.md",
@@ -212,7 +213,7 @@
   "security/cloudquery/github_toplevel/cq-source-yc/.goreleaser.yaml":"security/cloudquery/github_toplevel/cq-source-yc/.goreleaser.yaml",
   "security/cloudquery/github_toplevel/cq-source-yc/AUTHORS":"security/cloudquery/github_toplevel/cq-source-yc/AUTHORS",
   "security/cloudquery/github_toplevel/cq-source-yc/CHANGELOG.md":"security/cloudquery/github_toplevel/cq-source-yc/CHANGELOG.md",
-  "security/cloudquery/github_toplevel/cq-source-yc/CONTRIBUTING":"security/cloudquery/github_toplevel/cq-source-yc/CONTRIBUTING",
+  "security/cloudquery/github_toplevel/cq-source-yc/CONTRIBUTING.md":"security/cloudquery/github_toplevel/cq-source-yc/CONTRIBUTING.md",
   "security/cloudquery/github_toplevel/cq-source-yc/LICENSE":"security/cloudquery/github_toplevel/cq-source-yc/LICENSE",
   "security/cloudquery/github_toplevel/cq-source-yc/README.md":"security/cloudquery/github_toplevel/cq-source-yc/README.md",
   "test/config.yaml":"security/cloudquery/cq-source-yc/test/config.yaml"

AUTHORS

@@ -10,4 +10,6 @@ Danil Beltyukov
 Gennady Lipenkov
 Roman Mingazeev
 Valentin Kiel
-Yevgeny Pats
+Yevgeny Pats
+
+More contributors available here: https://github.com/yandex-cloud/cq-source-yc/graphs/contributors

CONTRIBUTING CONTRIBUTING.mdCONTRIBUTING renamed to CONTRIBUTING.md

@@ -18,7 +18,7 @@ If you agree with these principles, please read and adopt our CLA. By providing
 
 ## Provide contributions
 
-If you have already adopted terms and conditions of the CLA, you are able to provide your contributions. When you submit your pull request, please add the following information into it:
+If you have already adopted terms and conditions of the CLA, you are able to provide your contributions. When you submit your pull request, please add the following information into it (in a separate comment):
 
 ```
 I hereby agree to the terms of the CLA available at: [link].

go.mod

@@ -1,8 +1,6 @@
 module github.com/yandex-cloud/cq-source-yc
 
-go 1.22.0
-
-toolchain go1.22.5
+go 1.22.5
 
 require (
 	github.com/apache/arrow/go/v17 v17.0.0