🩹 [Patch]: Improve security, update dependencies, and reorganize source files (#19)
This patch modernizes the repository's CI/CD infrastructure by pinning dependencies to specific commits, improving security posture, fixing linter warnings, and aligning the source code structure with PSModule organization standards.
- Fixes #18
Changed
Workflow Security Improvements
- Pinned all GitHub Actions to commit SHAs with version comments for reproducible builds
- Added
persist-credentials: falseto all checkout steps for improved security - Changed Release workflow trigger from
pull_request_targettopull_requestfor better fork handling - Added path filters to Release workflow to only trigger on relevant file changes (
action.yml,src/**)
Dependency Management
- Updated Dependabot schedule from
weeklytodailywith 7-day cooldown for balanced update frequency - Updated
actions/checkouttov6.0.2(SHA:de0fac2e4500dabe0009e67214ff5f5447ce83dd) - Updated
super-linter/super-lintertov8.3.2(SHA:d5b0a2ab116623730dd094f15ddc1b6b25bf7b99) - Updated
PSModule/GitHub-Scripttov1.7.10(SHA:0097f3bbe3f413f3b577b9bcc600727b0ca3201a)
Action Migration
- Renamed
Auto-Release.ymlworkflow toRelease.yml - Migrated from
PSModule/Auto-Release@v1toPSModule/[email protected](SHA:88c70461c8f16cc09682005bcf3b7fca4dd8dc1a)
Source Reorganization
- Moved source files from
scripts/tosrc/folder for consistency with other PSModule actions - Updated
action.ymlto reference new source path
Linter Configuration
- Removed
.jscpd.jsonconfiguration file - Disabled
VALIDATE_BIOME_FORMATandVALIDATE_JSCPDvalidators in super-linter
Code Quality Fixes
- Fixed
PSAvoidUsingWriteHostwarnings by replacingWrite-HostwithWrite-Outputinmain.ps1
Action Improvements
- Added
Tokeninput with default value${{ github.token }}for automatic authentication - Passed
GITHUB_TOKENenvironment variable to the GitHub-Script action