Skip to content

Commit d86ccff

Browse files
anthony-nhsanthony-nhs
authored
Chore: [AEA-0000] - bump dev container version to 1.4.8 (#17)
bump dev container version to 1.4.8
1 parent e6e445a commit d86ccff

6 files changed

Lines changed: 40 additions & 37 deletions

File tree

‎.devcontainer/devcontainer.json‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -6,7 +6,7 @@
66
"args": {
77
"DOCKER_GID": "${env:DOCKER_GID:}",
88
"IMAGE_NAME": "node_24_python_3_14",
9-
"IMAGE_VERSION": "v1.4.2",
9+
"IMAGE_VERSION": "v1.4.8",
1010
"USER_UID": "${localEnv:USER_ID:}",
1111
"USER_GID": "${localEnv:GROUP_ID:}"
1212
},

‎.gitallowed‎

Lines changed: 0 additions & 7 deletions
This file was deleted.

‎.github/workflows/ci.yml‎

Lines changed: 9 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -2,12 +2,12 @@ name: ci
22

33
on:
44
push:
5-
branches: [main]
5+
branches: [ main ]
66

77
permissions: {}
88
jobs:
99
get_config_values:
10-
uses: NHSDigital/eps-common-workflows/.github/workflows/get-repo-config.yml@e798d5aee897de6f7dc387dd5623fcd9ba4c8929
10+
uses: NHSDigital/eps-common-workflows/.github/workflows/get-repo-config.yml@8b259f4f2d2b8ff1345fb0d2f9b9f0fbb9d19845
1111
permissions:
1212
attestations: "read"
1313
contents: "read"
@@ -16,21 +16,24 @@ jobs:
1616
verify_published_from_main_image: false
1717

1818
quality_checks:
19-
uses: NHSDigital/eps-common-workflows/.github/workflows/quality-checks-devcontainer.yml@f3d19a678a725917a5c59cae4d76db621bb7c9c7
20-
needs: [get_config_values]
19+
uses: NHSDigital/eps-common-workflows/.github/workflows/quality-checks-devcontainer.yml@8b259f4f2d2b8ff1345fb0d2f9b9f0fbb9d19845
20+
needs: [ get_config_values ]
2121
permissions:
2222
contents: "read"
23+
packages: "read"
24+
id-token: "write"
2325
with:
2426
pinned_image: ${{ needs.get_config_values.outputs.pinned_image }}
2527
secrets:
2628
SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}
2729

2830
tag_release:
29-
needs: [get_config_values]
30-
uses: NHSDigital/eps-common-workflows/.github/workflows/tag-release-devcontainer.yml@f3d19a678a725917a5c59cae4d76db621bb7c9c7
31+
needs: [ get_config_values ]
32+
uses: NHSDigital/eps-common-workflows/.github/workflows/tag-release-devcontainer.yml@8b259f4f2d2b8ff1345fb0d2f9b9f0fbb9d19845
3133
permissions:
3234
id-token: "write"
3335
contents: "write"
36+
packages: "write"
3437
with:
3538
dry_run: true
3639
pinned_image: ${{ needs.get_config_values.outputs.pinned_image }}

‎.github/workflows/pull_request.yml‎

Lines changed: 11 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -2,13 +2,13 @@ name: pull_request
22

33
on:
44
pull_request:
5-
branches: [main]
5+
branches: [ main ]
66

77
permissions: {}
88

99
jobs:
1010
get_config_values:
11-
uses: NHSDigital/eps-common-workflows/.github/workflows/get-repo-config.yml@e798d5aee897de6f7dc387dd5623fcd9ba4c8929
11+
uses: NHSDigital/eps-common-workflows/.github/workflows/get-repo-config.yml@8b259f4f2d2b8ff1345fb0d2f9b9f0fbb9d19845
1212
permissions:
1313
attestations: "read"
1414
contents: "read"
@@ -17,7 +17,7 @@ jobs:
1717
verify_published_from_main_image: false
1818

1919
dependabot-auto-approve-and-merge:
20-
uses: NHSDigital/eps-common-workflows/.github/workflows/dependabot-auto-approve-and-merge.yml@e798d5aee897de6f7dc387dd5623fcd9ba4c8929
20+
uses: NHSDigital/eps-common-workflows/.github/workflows/dependabot-auto-approve-and-merge.yml@8b259f4f2d2b8ff1345fb0d2f9b9f0fbb9d19845
2121
permissions:
2222
contents: "write"
2323
pull-requests: "write"
@@ -26,25 +26,28 @@ jobs:
2626
AUTOMERGE_PEM: ${{ secrets.AUTOMERGE_PEM }}
2727

2828
quality_checks:
29-
uses: NHSDigital/eps-common-workflows/.github/workflows/quality-checks-devcontainer.yml@f3d19a678a725917a5c59cae4d76db621bb7c9c7
29+
uses: NHSDigital/eps-common-workflows/.github/workflows/quality-checks-devcontainer.yml@8b259f4f2d2b8ff1345fb0d2f9b9f0fbb9d19845
3030
permissions:
3131
contents: "read"
32-
needs: [get_config_values]
32+
packages: "read"
33+
id-token: "write"
34+
needs: [ get_config_values ]
3335
with:
3436
pinned_image: ${{ needs.get_config_values.outputs.pinned_image }}
3537
secrets:
3638
SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}
3739

3840
pr_title_format_check:
39-
uses: NHSDigital/eps-common-workflows/.github/workflows/pr_title_check.yml@e798d5aee897de6f7dc387dd5623fcd9ba4c8929
41+
uses: NHSDigital/eps-common-workflows/.github/workflows/pr_title_check.yml@8b259f4f2d2b8ff1345fb0d2f9b9f0fbb9d19845
4042
permissions:
4143
pull-requests: "write"
4244
tag_release:
43-
needs: [get_config_values]
44-
uses: NHSDigital/eps-common-workflows/.github/workflows/tag-release-devcontainer.yml@f3d19a678a725917a5c59cae4d76db621bb7c9c7
45+
needs: [ get_config_values ]
46+
uses: NHSDigital/eps-common-workflows/.github/workflows/tag-release-devcontainer.yml@8b259f4f2d2b8ff1345fb0d2f9b9f0fbb9d19845
4547
permissions:
4648
id-token: "write"
4749
contents: "write"
50+
packages: "write"
4851
with:
4952
dry_run: true
5053
pinned_image: ${{ needs.get_config_values.outputs.pinned_image }}

‎.github/workflows/release.yml‎

Lines changed: 8 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -9,7 +9,7 @@ permissions: {}
99

1010
jobs:
1111
get_config_values:
12-
uses: NHSDigital/eps-common-workflows/.github/workflows/get-repo-config.yml@e798d5aee897de6f7dc387dd5623fcd9ba4c8929
12+
uses: NHSDigital/eps-common-workflows/.github/workflows/get-repo-config.yml@8b259f4f2d2b8ff1345fb0d2f9b9f0fbb9d19845
1313
permissions:
1414
attestations: "read"
1515
contents: "read"
@@ -18,21 +18,24 @@ jobs:
1818
verify_published_from_main_image: false
1919

2020
quality_checks:
21-
uses: NHSDigital/eps-common-workflows/.github/workflows/quality-checks-devcontainer.yml@f3d19a678a725917a5c59cae4d76db621bb7c9c7
22-
needs: [get_config_values]
21+
uses: NHSDigital/eps-common-workflows/.github/workflows/quality-checks-devcontainer.yml@8b259f4f2d2b8ff1345fb0d2f9b9f0fbb9d19845
22+
needs: [ get_config_values ]
2323
permissions:
2424
contents: "read"
25+
packages: "read"
26+
id-token: "write"
2527
with:
2628
pinned_image: ${{ needs.get_config_values.outputs.pinned_image }}
2729
secrets:
2830
SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}
2931

3032
tag_release:
31-
needs: [get_config_values]
32-
uses: NHSDigital/eps-common-workflows/.github/workflows/tag-release-devcontainer.yml@f3d19a678a725917a5c59cae4d76db621bb7c9c7
33+
needs: [ get_config_values ]
34+
uses: NHSDigital/eps-common-workflows/.github/workflows/tag-release-devcontainer.yml@8b259f4f2d2b8ff1345fb0d2f9b9f0fbb9d19845
3335
permissions:
3436
id-token: "write"
3537
contents: "write"
38+
packages: "write"
3639
with:
3740
dry_run: false
3841
pinned_image: ${{ needs.get_config_values.outputs.pinned_image }}

‎.pre-commit-config.yaml‎

Lines changed: 11 additions & 10 deletions
Original file line numberDiff line numberDiff line change
@@ -26,27 +26,27 @@ repos:
2626
- id: zizmor-action
2727
name: Check action.yml
2828
entry: zizmor
29-
args: ["action.yml"]
29+
args: [ "action.yml" ]
3030
language: system
3131
files: action.yml
3232
pass_filenames: false
3333

3434
- id: lint-githubactions
3535
name: Lint github actions
3636
entry: make
37-
args: ["actionlint"]
37+
args: [ "actionlint" ]
3838
language: system
3939
files: ^.github
40-
types_or: [yaml]
40+
types_or: [ yaml ]
4141
pass_filenames: false
4242

4343
- id: lint-githubaction-scripts
4444
name: Lint github action scripts
4545
entry: make
46-
args: ["shellcheck"]
46+
args: [ "shellcheck" ]
4747
language: system
4848
files: ^.github/scripts
49-
types_or: [sh, shell]
49+
types_or: [ sh, shell ]
5050
pass_filenames: false
5151

5252
- id: check-commit-signing
@@ -78,14 +78,15 @@ repos:
7878
pass_filenames: false
7979
always_run: true
8080

81-
- id: git-secrets
82-
name: Git Secrets
83-
description: git-secrets scans commits, commit messages, and --no-ff merges to prevent adding secrets into your git repositories.
81+
- id: gitleasks
82+
name: Git Leaks
83+
description: gitleaks scans commits, commit messages, and --no-ff merges to
84+
prevent adding secrets into your git repositories.
8485
entry: bash
8586
args:
8687
- -c
87-
- "git-secrets --pre_commit_hook"
88+
- "gitleaks git --pre-commit --redact --staged --verbose"
8889
language: system
8990

9091
fail_fast: true
91-
default_stages: [pre-commit]
92+
default_stages: [ pre-commit ]

0 commit comments

Comments
 (0)