diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 1178de6..1d03a06 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -29,7 +29,7 @@ jobs: steps: - name: Checkout id: checkout - uses: actions/checkout@v5 + uses: actions/checkout@v6 - name: Setup Docker BuildX id: setup-buildx @@ -62,7 +62,7 @@ jobs: steps: - name: Checkout id: checkout - uses: actions/checkout@v5 + uses: actions/checkout@v6 - name: Test Local Action id: test-action diff --git a/.github/workflows/linter.yml b/.github/workflows/linter.yml index a6849f6..2689c63 100644 --- a/.github/workflows/linter.yml +++ b/.github/workflows/linter.yml @@ -21,7 +21,7 @@ jobs: steps: - name: Checkout id: checkout - uses: actions/checkout@v5 + uses: actions/checkout@v6 with: fetch-depth: 0 @@ -32,4 +32,6 @@ jobs: DEFAULT_BRANCH: main GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} VALIDATE_ALL_CODEBASE: true + VALIDATE_BIOME_FORMAT: false + VALIDATE_BIOME_LINT: false VALIDATE_GITHUB_ACTIONS_ZIZMOR: false diff --git a/Dockerfile b/Dockerfile index a472548..53a5e44 100644 --- a/Dockerfile +++ b/Dockerfile @@ -7,5 +7,12 @@ WORKDIR /usr/src # Copy any source file(s) required for the action COPY entrypoint.sh . +# Create a non-root user and switch to it +RUN addgroup -S actiongroup && adduser -S actionuser -G actiongroup && \ + chown -R actionuser:actiongroup /usr/src && \ + chmod +x /usr/src/entrypoint.sh + +USER actionuser + # Configure the container to be run as an executable ENTRYPOINT ["/usr/src/entrypoint.sh"]