Actions features to leverage

[kevinlul]

Fun, low-priority things to try out.

• [ ] actions/dependency-review-action
• [x] third-party static analyzers (e.g. Codacy)
• [x] upload eslint results like CodeQL
• [x] hadolint
• [x] use environments
• [ ] use a shared deploy workflow instead of code duplication
• [ ] figure out if Ansible docker.docker_stack waits for convergence (like docker service update)
• [ ] actions/delete-package-versions for a retention policy on old images

[kevinlul]

Hilariously, most of the suggested static analyzers in the blog post are paid-only or dead now.

[kevinlul]

https://github.blog/2023-08-24-a-faster-way-to-manage-version-updates-with-dependabot/

[kevinlul]

https://github.com/marketplace/renovate

[kevinlul]

https://docs.github.com/en/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file#groups

[kevinlul]

https://github.com/actions/attest-build-provenance