Bump github/super-linter from 5 to 6 (#33)

* Bump github/super-linter from 5 to 6

Bumps [github/super-linter](https://github.com/github/super-linter) from 5 to 6.
- [Release notes](https://github.com/github/super-linter/releases)
- [Changelog](https://github.com/github/super-linter/blob/main/CHANGELOG.md)
- [Commits](github/super-linter@v5...v6)

---
updated-dependencies:
- dependency-name: github/super-linter
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

* Update ci.yaml

* checkov lint

Signed-off-by: André Bauer <andre.bauer@staffbase.com>

* statuses write

Signed-off-by: André Bauer <andre.bauer@staffbase.com>

* foo

Signed-off-by: André Bauer <andre.bauer@staffbase.com>

---------

Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: André Bauer <andre.bauer@staffbase.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: André Bauer <monotek@users.noreply.github.com>
Co-authored-by: André Bauer <andre.bauer@staffbase.com>

.github/workflows/ci.yaml

@@ -1,6 +1,8 @@
 ---
 name: ci
 
+permissions: read-all
+
 on:
   pull_request:
 
@@ -12,12 +14,15 @@ jobs:
     steps:
       - name: Checkout Code
         uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
 
       - name: Lint Code Base
-        uses: github/super-linter/slim@v5
+        uses: github/super-linter/slim@v6
         env:
           DEFAULT_BRANCH: main
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          VALIDATE_SHELL_SHFMT: false
 
   docker-build:
     runs-on: ubuntu-22.04

.github/workflows/dependabot-auto-merge.yaml

@@ -1,11 +1,15 @@
 ---
 name: dependabot-auto-merge
 
+permissions: read-all
+
 on:
   pull_request:
 
 jobs:
   auto-merge:
+    permissions:
+      contents: write
     runs-on: ubuntu-22.04
     steps:
       - uses: actions/checkout@v4

.github/workflows/release-drafter.yaml

@@ -1,16 +1,16 @@
 ---
 name: Release Drafter
 
+permissions:
+  contents: read
+
 on:
   push:
     branches:
       - main
   pull_request:
     types: [opened, reopened, synchronize]
 
-permissions:
-  contents: read
-
 jobs:
   update_release_draft:
     permissions:

.github/workflows/release.yaml

@@ -1,6 +1,8 @@
 ---
 name: release
 
+permissions: read-all
+
 on:
   push:
     branches:
@@ -10,6 +12,10 @@ on:
 
 jobs:
   docker-build-push:
+    permissions:
+      contents: read
+      id-token: write
+      packages: write
     runs-on: ubuntu-22.04
     steps:
       - name: Checkout Code

Dockerfile

@@ -4,4 +4,7 @@ COPY self-heal.sh /self-heal.sh
 
 CMD ["/bin/sh"]
 
+#checkov:skip=CKV_DOCKER_2:We don't need Docker HEALTHCHECK in Kubernetes
+#checkov:skip=CKV_DOCKER_3:Image inherits curl_user form base image
+
 ENTRYPOINT ["/self-heal.sh"]