diff --git a/.codespellrc b/.codespellrc new file mode 100644 index 0000000..ab2638a --- /dev/null +++ b/.codespellrc @@ -0,0 +1,2 @@ +[codespell] +ignore-words-list = nd,ans diff --git a/.github/linters/zizmor.yaml b/.github/linters/zizmor.yaml new file mode 100644 index 0000000..00ea2bb --- /dev/null +++ b/.github/linters/zizmor.yaml @@ -0,0 +1,5 @@ +rules: + unpinned-uses: + config: + policies: + "*": ref-pin diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml index ecefd7b..7fa6a89 100644 --- a/.github/workflows/codeql-analysis.yml +++ b/.github/workflows/codeql-analysis.yml @@ -41,6 +41,8 @@ jobs: steps: - name: Checkout repository uses: actions/checkout@v4 + with: + persist-credentials: false # Initializes the CodeQL tools for scanning. - name: Initialize CodeQL diff --git a/.github/workflows/eslint.yml b/.github/workflows/eslint.yml index aaf8db2..280e7bc 100644 --- a/.github/workflows/eslint.yml +++ b/.github/workflows/eslint.yml @@ -25,6 +25,8 @@ jobs: steps: - name: Checkout repository uses: actions/checkout@v6 + with: + persist-credentials: false - name: Set up Node.js ${{ env.NODE_VERSION }} uses: actions/setup-node@v6 with: diff --git a/.github/workflows/node.js.yml b/.github/workflows/node.js.yml index 13de996..dbafe05 100644 --- a/.github/workflows/node.js.yml +++ b/.github/workflows/node.js.yml @@ -24,11 +24,13 @@ jobs: steps: - name: Checkout repository uses: actions/checkout@v6 + with: + persist-credentials: false - name: Set up Node.js ${{ env.NODE_VERSION }} uses: actions/setup-node@v6 with: node-version: ${{ env.NODE_VERSION }} - cache: npm + package-manager-cache: false - name: Install dependencies run: npm ci - name: Run unit tests @@ -40,11 +42,13 @@ jobs: steps: - name: Checkout repository uses: actions/checkout@v6 + with: + persist-credentials: false - name: Set up Node.js ${{ env.NODE_VERSION }} uses: actions/setup-node@v6 with: node-version: ${{ env.NODE_VERSION }} - cache: npm + package-manager-cache: false - name: Install dependencies run: npm ci - name: Set up Chrome for Testing @@ -71,11 +75,13 @@ jobs: steps: - name: Checkout repository uses: actions/checkout@v6 + with: + persist-credentials: false - name: Set up Node.js ${{ env.NODE_VERSION }} uses: actions/setup-node@v6 with: node-version: ${{ env.NODE_VERSION }} - cache: npm + package-manager-cache: false - name: Install dependencies run: npm ci - name: Build development bundle diff --git a/.github/workflows/superlinter.yml b/.github/workflows/superlinter.yml index 2273ea0..939c856 100644 --- a/.github/workflows/superlinter.yml +++ b/.github/workflows/superlinter.yml @@ -11,6 +11,8 @@ permissions: packages: read # To report GitHub Actions status checks statuses: write + pull-requests: write + issues: write concurrency: group: ci-${{ github.workflow }}-${{ github.ref }} @@ -33,20 +35,25 @@ jobs: # super-linter needs the full git history to get the # list of files that changed across commits fetch-depth: 0 + persist-credentials: false # Runs the Super-Linter action - name: Run Super-Linter - uses: super-linter/super-linter@v7 + uses: super-linter/super-linter@v8 env: DEFAULT_BRANCH: master GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} + ENABLE_GITHUB_PULL_REQUEST_SUMMARY_COMMENT: true + SAVE_SUPER_LINTER_SUMMARY: true # Don't validate CSS because it is too dumb to find my stylelintrc.json. Covered by the eslint job VALIDATE_CSS: false - VALIDATE_HTML_PRETTIER: false # Don't validate javascript, because it can't install packages VALIDATE_JAVASCRIPT_ES: false VALIDATE_JAVASCRIPT_PRETTIER: false VALIDATE_JAVASCRIPT_STANDARD: false VALIDATE_JSCPD: false - VALIDATE_JSON: false VALIDATE_BASH_EXEC: false + # Not using biome + VALIDATE_BIOME: false + VALIDATE_BIOME_FORMAT: false + VALIDATE_BIOME_LINT: false diff --git a/cypress/test.html b/cypress/test.html index f93f600..3652f8c 100644 --- a/cypress/test.html +++ b/cypress/test.html @@ -1,49 +1,60 @@ - + -
- + +