super-linterアップデート (#1477)

* Update super-linter/super-linter action to v6

* Add DEFAULT_BRANCH: main

* Fix

---------

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

Author: massongit

.github/workflows/add-to-task-list.yml

@@ -7,6 +7,7 @@ on:
   issues:
     types:
       - opened
+permissions: read-all
 jobs:
   add-to-task-list:
     runs-on: ubuntu-latest

.github/workflows/codeql.yml

@@ -17,6 +17,10 @@ on:
     branches: ["main"]
   schedule:
     - cron: '28 4 * * 6'
+permissions:
+  actions: read
+  contents: read
+  security-events: write
 jobs:
   analyze:
     name: Analyze
@@ -27,10 +31,6 @@ jobs:
     # Consider using larger runners for possible analysis time improvements.
     runs-on: ${{ (matrix.language == 'swift' && 'macos-latest') || 'ubuntu-latest' }}
     timeout-minutes: ${{ (matrix.language == 'swift' && 120) || 360 }}
-    permissions:
-      actions: read
-      contents: read
-      security-events: write
     strategy:
       fail-fast: false
       matrix:

.github/workflows/github-actions-cache-cleaner.yml

@@ -7,6 +7,7 @@ on:
   schedule:
     - cron: '0 21 * * *' # 06:00 JST
   workflow_dispatch:
+permissions: read-all
 jobs:
   github-actions-cache-cleaner:
     runs-on: ubuntu-latest

.github/workflows/super-linter.yml

@@ -18,6 +18,10 @@ on:
     branches:
       - main
   pull_request:
+permissions:
+  contents: read
+  packages: read
+  statuses: write
 ###############
 # Set the Job #
 ###############
@@ -48,9 +52,10 @@ jobs:
       # Run Linter against code base #
       ################################
       - name: Lint Code Base
-        uses: super-linter/super-linter/slim@v5.7.2
+        uses: super-linter/super-linter/slim@v6.0.0
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          DEFAULT_BRANCH: main
           LINTER_RULES_PATH: .
 concurrency:
   group: ${{ github.workflow }}-${{ github.event_name }}-${{ github.ref }}

.github/workflows/update-package.yml

@@ -10,13 +10,13 @@ on:
   push:
     branches:
       - main
+permissions:
+  contents: write
+  pull-requests: write
 jobs:
   # npm installを実行し、package.jsonやpackage-lock.jsonに差分があればPRを作る
   update-package:
     runs-on: ubuntu-latest
-    permissions:
-      contents: write
-      pull-requests: write
     steps:
       - uses: actions/checkout@v4.1.1
         with:

.github/workflows/update-readme.yml

@@ -10,12 +10,12 @@ on:
   push:
     branches:
       - main
+permissions:
+  contents: write
+  pull-requests: write
 jobs:
   update-readme:
     runs-on: ubuntu-latest
-    permissions:
-      contents: write
-      pull-requests: write
     steps:
       - uses: actions/checkout@v4.1.1
         with:

scripts/action/push.sh

@@ -6,7 +6,7 @@ git config user.email "${EMAIL}"
 GIT_COMMIT_COMMAND="git commit"
 
 if [ "$NO_VERIFY" = "true" ]; then
-  GIT_COMMIT_COMMAND="$GIT_COMMIT_COMMAND --no-verify"
+	GIT_COMMIT_COMMAND="$GIT_COMMIT_COMMAND --no-verify"
 fi
 
 GIT_COMMIT_COMMAND="$GIT_COMMIT_COMMAND -m \"${PR_TITLE_PREFIX}\""
@@ -18,7 +18,7 @@ GITHUB_HEAD="HEAD:refs/heads/${BRANCH_NAME_PREFIX}-${HEAD_REF}"
 GIT_PUSH_COMMAND="git push"
 
 if [ "$NO_VERIFY" = "true" ]; then
-  GIT_PUSH_COMMAND="$GIT_PUSH_COMMAND --no-verify"
+	GIT_PUSH_COMMAND="$GIT_PUSH_COMMAND --no-verify"
 fi
 
 GIT_PUSH_COMMAND="$GIT_PUSH_COMMAND -f \"${REPO_URL}\" \"${GITHUB_HEAD}\""

scripts/super_linter/build/set_path.sh

@@ -3,4 +3,4 @@
 npm ci
 action="$(yq '.jobs.build.steps[-1].uses' .github/workflows/super-linter.yml)"
 PATH="$(docker run --rm --entrypoint '' "ghcr.io/${action//\/slim@/:slim-}" /bin/sh -c 'echo $PATH')"
-echo "PATH=/github/workspace/node_modules/.bin:${PATH}" >> "$GITHUB_ENV"
+echo "PATH=/github/workspace/node_modules/.bin:${PATH}" >>"$GITHUB_ENV"

scripts/update_readme/update_readme/update_readme.sh

@@ -2,4 +2,4 @@
 
 DESCRIPTION="$(yq '.description' action.yml)"
 export DESCRIPTION
-envsubst < README.template.md > README.md
+envsubst <README.template.md >README.md