Merge pull request #638 from sir-gon/develop

[CONFIG] [Github Actions] Now use fixed version of Github Actions ima…

Author: sir-gon

.github/workflows/codeql.yml

@@ -23,7 +23,7 @@ on: # yamllint disable-line rule:truthy
 jobs:
   analyze:
     name: Analyze
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     permissions:
       actions: read
       contents: read

.github/workflows/docker-image.yml

@@ -18,7 +18,7 @@ jobs:
 
   build:
     name: "Build Docker images"
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     steps:
       - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
 
@@ -73,7 +73,7 @@ jobs:
 
   lint:
     name: "Run in docker: LINT"
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     needs: build
     steps:
       - name: Download artifact
@@ -93,7 +93,7 @@ jobs:
 
   test:
     name: "Run in docker: TEST"
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     needs: build
     steps:
       - name: Download artifact
@@ -113,7 +113,7 @@ jobs:
 
   security:
     name: "Snyk Container"
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     needs: build
     permissions:
       actions: read
@@ -160,7 +160,7 @@ jobs:
           sarif_file: 'snyk.sarif'
   scan:
     name: "Trivy"
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     needs: build
     permissions:
       actions: read

.github/workflows/gitleaks.yml

@@ -19,7 +19,7 @@ on: # yamllint disable-line rule:truthy
 jobs:
   scan:
     name: gitleaks
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     steps:
       - uses: actions/checkout@v4
         with:

.github/workflows/markdown-lint.yml

@@ -9,13 +9,16 @@ on: # yamllint disable-line rule:truthy
     branches: ["main"]
   workflow_dispatch:
 
+permissions: read-all
+
 jobs:
-  build:
-    runs-on: ubuntu-latest
+  markdownlint:
+    name: Markdown Lint
+    runs-on: ubuntu-24.04
 
     strategy:
       matrix:
-        node-version: [20.x]
+        node-version: [22.x]
         # See supported Node.js release schedule
         # at https://nodejs.org/en/about/releases/
 
@@ -31,9 +34,6 @@ jobs:
       - name: Install dependencies
         run: npm install -g markdownlint-cli
 
-      - name: Version
-        run: markdownlint --version
-
       - name: Lint
         run: >
           markdownlint '**/*.md' --ignore node_modules

.github/workflows/python-coverage.yml

@@ -13,12 +13,12 @@ env:
   LOG_LEVEL: INFO
 
 jobs:
-  build:
-    name: "Run CI"
+  coverage:
+    name: "Python CI Coverage"
     strategy:
       fail-fast: false
       matrix:
-        os: ["ubuntu-latest"]
+        os: ["ubuntu-24.04"]
         python: ["3.12"]
     runs-on: ${{ matrix.os }}
     steps:

.github/workflows/python.yml

@@ -18,7 +18,7 @@ jobs:
     strategy:
       fail-fast: false
       matrix:
-        os: ["windows-latest", "ubuntu-latest", "macOS-latest"]
+        os: ["ubuntu-24.04", "macos-14", "windows-2022"]
         python: ["3.10", "3.11", "3.12"]
     runs-on: ${{ matrix.os }}
     steps:

.github/workflows/snyk-code.yml

@@ -12,7 +12,7 @@ on: # yamllint disable-line rule:truthy
 
 jobs:
   security:
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     steps:
       - uses: actions/checkout@master
       - name: Run Snyk to check for vulnerabilities

.github/workflows/yamllint.yml

@@ -11,7 +11,8 @@ on: # yamllint disable-line rule:truthy
 
 jobs:
   lint:
-    runs-on: ubuntu-latest
+    name: YAML lint
+    runs-on: ubuntu-24.04
     steps:
       - name: Checkout repository
         uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4