prep for release (#2)

* enable Code Scanning

* updates to Nomad 1.5.0 🎉

* changes lockfile to version 2 to allow for Snyk inspections

* expands permissions

* bumps `github-actions-core` to `0.3.0`

.github/workflows/actions-self-test.yml

@@ -24,7 +24,7 @@ jobs:
         run: nomad version
 
       - name: Validate `nomad` version is accurate
-        run: "nomad version | grep --silent 'Nomad v1.4.5'"
+        run: "nomad version | grep --silent 'Nomad v1.5.0'"
 
       - name: Run `nomad fmt`
         run: nomad fmt "${{ github.action_path }}./test/example.nomad.hcl"

.github/workflows/snyk.yml

@@ -8,6 +8,11 @@ jobs:
   snyk:
     runs-on: ubuntu-latest
 
+    permissions:
+      security-events: write
+      actions: read
+      contents: read
+
     strategy:
       # see https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#jobsjob_idstrategyfail-fast
       fail-fast: false
@@ -28,8 +33,8 @@ jobs:
           # see https://github.com/snyk/actions/tree/master/node#uploading-snyk-scan-results-to-github-code-scanning
           args: --policy-path=.snyk --sarif-file-output=snyk.sarif --org=${{ secrets.SNYK_ORG }}
 
-#      # see https://github.com/github/codeql-action/tree/main/upload-sarif
-#      - name: Upload Snyk IaC results to GitHub Code Scanning
-#        uses: github/codeql-action/upload-sarif@v2
-#        with:
-#          sarif_file: snyk.sarif
+      # see https://github.com/github/codeql-action/tree/main/upload-sarif
+      - name: Upload Snyk IaC results to GitHub Code Scanning
+        uses: github/codeql-action/upload-sarif@v2
+        with:
+          sarif_file: snyk.sarif

package.json

@@ -22,7 +22,7 @@
     "@actions/core": "^1.10.0",
     "@actions/io": "^1.1.2",
     "@actions/tool-cache": "^2.0.1",
-    "@hashicorp/github-actions-core": "github:hashicorp/github-actions-core#v0.2.0",
+    "@hashicorp/github-actions-core": "github:hashicorp/github-actions-core#v0.3.0",
     "@vercel/ncc": "^0.36.1"
   },
   "devDependencies": {