Updates for super-linter v8

Author: mbaldessari

.github/dependabot.yml

@@ -6,3 +6,8 @@ updates:
     directory: "/"
     schedule:
       interval: "weekly"
+    cooldown:
+      default-days: 7
+      semver-major: 30
+      semver-minor: 7
+      semver-patch: 1

.github/workflows/helm-lint.yml

@@ -17,10 +17,12 @@ jobs:
 
     steps:
       - name: Checkout Code
-        uses: actions/checkout@v4
+        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
+        with:
+          persist-credentials: false
 
       - name: Setup helm
-        uses: azure/setup-helm@v4
+        uses: azure/setup-helm@1a275c3b69536ee54be43f2070a358922e12c8d4 # v4
         with:
           version: 'v3.14.0'
 

.github/workflows/helm-unittest.yml

@@ -18,7 +18,9 @@ jobs:
 
     steps:
       - name: Checkout Code
-        uses: actions/checkout@v4
+        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
+        with:
+          persist-credentials: false
 
       - name: Run make helmlint
         run: |

.github/workflows/superlinter.yml

@@ -13,16 +13,17 @@ jobs:
 
     steps:
       - name: Checkout Code
-        uses: actions/checkout@v4
+        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
         with:
           # Full git history is needed to get a proper list of changed files within `super-linter`
           fetch-depth: 0
+          persist-credentials: false
 
       ################################
       # Run Linter against code base #
       ################################
       - name: Lint Code Base
-        uses: super-linter/super-linter/slim@v8
+        uses: super-linter/super-linter/slim@61abc07d755095a68f4987d1c2c3d1d64408f1f9 # v8
         env:
           VALIDATE_ALL_CODEBASE: true
           DEFAULT_BRANCH: main

.github/workflows/update-helm-repo.yml

@@ -12,19 +12,22 @@
 #
 
 name: vp-patterns/update-helm-repo
+
+permissions: read-all
+
 on:
   push:
     tags:
       - 'v[0-9]+.[0-9]+.[0-9]+'
 
 jobs:
   helmlint:
-    uses: validatedpatterns/helm-charts/.github/workflows/helmlint.yml@workflow-stable
+    uses: validatedpatterns/helm-charts/.github/workflows/helmlint.yml@workflow-stable # zizmor: ignore[unpinned-uses]
     permissions:
       contents: read
 
   update-helm-repo:
     needs: [helmlint]
-    uses: validatedpatterns/helm-charts/.github/workflows/update-helm-repo.yml@workflow-stable
+    uses: validatedpatterns/helm-charts/.github/workflows/update-helm-repo.yml@workflow-stable # zizmor: ignore[unpinned-uses]
     permissions: read-all
     secrets: inherit

README.md

@@ -19,14 +19,14 @@ This chart is used by the Validated Patterns installation script that can be fou
 | Key | Type | Default | Description |
 |-----|------|---------|-------------|
 | global.extraValueFiles | list | `[]` | List of additional value files to be passed to the pattern |
-| main | object | depends on the individual settings | main is used primarly for initial bootstrap pattern configuration |
+| main | object | depends on the individual settings | main is used primarily for initial bootstrap pattern configuration |
 | main.clusterGroupName | string | `"default"` | Name of the clusterGroup to be used. Drives the clusterGroup chart |
 | main.experimentalCapabilities | string | `""` | String to enable certain experimental capabilities in the operator and the framework. Not needed unless you know exactly what you're doing. |
 | main.git | object | depends on the individual settings | Settings related to the Git repository used to deploy the pattern |
 | main.git.repoURL | string | `"https://github.com/pattern-clone/mypattern"` | Repository URL pointing to the pattern |
 | main.git.repoUpstreamURL | string | `nil` | Setting this field will make it so that an in-cluster gitea instance will be spawned. `repoURL` will be ignored and the pattern will be deployed using the in-gitea URL |
 | main.git.revision | string | `"main"` | The branch or Git reference to use to deploy the pattern |
-| main.gitea | object | `{"chartName":"gitea","chartVersion":"0.0.*","helmRepoUrl":"https://charts.validatedpatterns.io/"}` | Settings releated to the in-cluster gitea installation |
+| main.gitea | object | `{"chartName":"gitea","chartVersion":"0.0.*","helmRepoUrl":"https://charts.validatedpatterns.io/"}` | Settings related to the in-cluster gitea installation |
 | main.gitea.chartName | string | `"gitea"` | Chart name for the in-cluster gitea installation |
 | main.gitea.chartVersion | string | `"0.0.*"` | Chart version to install |
 | main.gitea.helmRepoUrl | string | `"https://charts.validatedpatterns.io/"` | Helm Repository URL for the gitea chart |

tests/README.md

@@ -22,7 +22,7 @@ helm plugin install https://github.com/helm-unittest/helm-unittest.git
 helm unittest .
 ```
 
-## Run unittests with docker
+## Run unittests with Docker
 ```bash
 docker run -ti --rm -v $(pwd):/apps:z helmunittest/helm-unittest .
 ```

values.yaml

@@ -2,7 +2,7 @@ global:
   # -- List of additional value files to be passed to the pattern
   extraValueFiles: []
 
-# -- main is used primarly for initial bootstrap pattern configuration
+# -- main is used primarily for initial bootstrap pattern configuration
 # @default -- depends on the individual settings
 main:
   # -- Settings related to the Git repository used to deploy the pattern
@@ -25,7 +25,7 @@ main:
     # -- Source to be used to install the gitops operator from
     operatorSource: redhat-operators
 
-  # -- Settings releated to the in-cluster gitea installation
+  # -- Settings related to the in-cluster gitea installation
   gitea:
     # -- Chart name for the in-cluster gitea installation
     chartName: gitea