Updates the CI/CD pipeline configuration to enhance linting capabilities and enforce security measures.
Enhances linting: Replaces the lint step in the .github/workflows/ci-cd-pipeline.yml file from github/super-linter@v3 to super-linter/slim@v6, incorporating configurations for improved code quality checks. This includes setting FILTER_REGEX_EXCLUDE to ignore specific directories, enabling VALIDATE_MARKDOWN and VALIDATE_YAML to ensure these file types are properly linted.
Improves security: Adds permissions with contents: read to the lint job, restricting the job's permissions to only read the repository contents. This follows best practices for GitHub Actions security by minimizing permissions.
Optimizes checkout: Adjusts the actions/checkout@v4 step to use fetch-depth: 0, ensuring a complete history is fetched for comprehensive linting and analysis.
Related to #24
Updates the CI/CD pipeline configuration to enhance linting capabilities and enforce security measures.
.github/workflows/ci-cd-pipeline.yml
file fromgithub/super-linter@v3
tosuper-linter/slim@v6
, incorporating configurations for improved code quality checks. This includes settingFILTER_REGEX_EXCLUDE
to ignore specific directories, enablingVALIDATE_MARKDOWN
andVALIDATE_YAML
to ensure these file types are properly linted.permissions
withcontents: read
to the lint job, restricting the job's permissions to only read the repository contents. This follows best practices for GitHub Actions security by minimizing permissions.actions/checkout@v4
step to usefetch-depth: 0
, ensuring a complete history is fetched for comprehensive linting and analysis.For more details, open the Copilot Workspace session.