ci(deps): bump anchore/sbom-action from 0.21.0 to 0.21.1 in the github-actions group #3828
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| --- | |
| name: Linting & Formatting | |
| on: | |
| merge_group: | |
| pull_request: | |
| types: [opened, synchronize, reopened] | |
| push: | |
| # Run on push to main, this is not actionable | |
| # but it gives us a baseline for PRs | |
| branches: [main] | |
| concurrency: | |
| group: ${{ github.ref }}-${{ github.workflow }} | |
| cancel-in-progress: true | |
| permissions: {} | |
| jobs: | |
| linter: | |
| name: 🧹 Lint & Format | |
| runs-on: ubuntu-latest | |
| permissions: | |
| contents: read | |
| actions: read # is needed by zizmorcore/zizmor-action | |
| pull-requests: write # is needed by oxsecurity/megalinter and reviewdog/action-suggester to post PR comments | |
| security-events: write # is needed by oxsecurity/megalinter for uploading sarif files | |
| steps: | |
| - uses: step-security/harden-runner@20cf305ff2072d973412fa9b1e3a4f227bda3c76 # v2.14.0 | |
| with: | |
| disable-sudo: true | |
| egress-policy: audit | |
| - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1 | |
| with: | |
| fetch-depth: 0 | |
| persist-credentials: false | |
| - uses: zizmorcore/zizmor-action@e639db99335bc9038abc0e066dfcd72e23d26fb4 # v0.3.0 | |
| with: | |
| persona: pedantic | |
| # flavors/dotnet is the smallest flavor of MegaLinter that contains the linters | |
| # we are interested in. | |
| - uses: oxsecurity/megalinter/flavors/dotnet@42bb470545e359597e7f12156947c436e4e3fb9a # v9.3.0 | |
| env: | |
| APPLY_FIXES: all | |
| VALIDATE_ALL_CODEBASE: true | |
| GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} | |
| - uses: github/codeql-action/upload-sarif@5d4e8d1aca955e8d8589aabd499c5cae939e33c7 # v4.31.9 | |
| if: success() || failure() | |
| with: | |
| sarif_file: megalinter-reports/megalinter-report.sarif | |
| - uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0 | |
| if: success() || failure() | |
| with: | |
| name: Linter Report | |
| path: | | |
| megalinter-reports | |
| - uses: reviewdog/action-suggester@aa38384ceb608d00f84b4690cacc83a5aba307ff # v1.24.0 | |
| with: | |
| tool_name: MegaLinter |