Merge pull request #487 from jbampton/separate-workflows-rename

Author: matz

.github/workflows/check-gems.yml

@@ -0,0 +1,22 @@
+name: Lint
+
+on: [pull_request]
+
+permissions:
+  contents: read
+
+jobs:
+  check-gems:
+    name: Check gem files
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout Code
+        uses: actions/checkout@v6
+        with:
+          persist-credentials: false
+      - uses: ruby/setup-ruby@v1
+        with:
+          ruby-version: '3.2' # Not needed with a .ruby-version file
+          bundler: 'default'
+          bundler-cache: true # runs 'bundle install' and caches installed gems automatically
+      - run: bundle exec .check.rb

.github/workflows/lint.yml .github/workflows/pre-commit.yml.github/workflows/lint.yml renamed to .github/workflows/pre-commit.yml

@@ -1,24 +1,19 @@
-name: Lint
+name: pre-commit
 
 on: [pull_request]
 
+permissions:
+  contents: read
+
 jobs:
-  check-gems:
-    name: Check gem files
-    runs-on: ubuntu-latest
-    steps:
-      - uses: actions/checkout@v6
-      - uses: ruby/setup-ruby@v1
-        with:
-          ruby-version: '3.2' # Not needed with a .ruby-version file
-          bundler: 'default'
-          bundler-cache: true # runs 'bundle install' and caches installed gems automatically
-      - run: bundle exec .check.rb
   pre-commit:
     name: Run pre-commit # https://pre-commit.com/
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - name: Checkout Code
+        uses: actions/checkout@v6
+        with:
+          persist-credentials: false
       - uses: actions/setup-python@v6 # https://www.python.org/
         with:
           python-version: '3.x' # Version range or exact version of a Python version to use, using SemVer's version range syntax

.github/workflows/super-linter.yml

@@ -3,6 +3,9 @@ name: Super-Linter
 
 on: [pull_request]
 
+permissions:
+  contents: read
+
 jobs:
   build:
     name: Lint Code Base
@@ -13,6 +16,7 @@ jobs:
         with:
           # Full git history is needed to get a proper list of changed files within `super-linter`
           fetch-depth: 0
+          persist-credentials: false
       - name: Lint Code Base
         uses: super-linter/super-linter/slim@v8.5.0
         env: