Merge branch 'main' into senzing-factory/build-resources#15

.github/linters/.yaml-lint.yml

@@ -0,0 +1,9 @@
+# Extends the default yamllint config by adjusting some options.
+extends: default
+
+rules:
+  comments-indentation: disable
+  line-length:
+    level: warning
+    allow-non-breakable-inline-mappings: true
+  truthy: disable

.github/workflows/add-labels-standardized.yaml

@@ -1,15 +1,16 @@
-name: 'add labels standardized'
+name: add labels standardized
 
 on:
   issues:
     types:
       - opened
       - reopened
 
+permissions:
+  issues: write
+
 jobs:
   add-issue-labels:
-    permissions:
-      issues: write
     secrets:
       ORG_MEMBERSHIP_TOKEN: ${{ secrets.ORG_MEMBERSHIP_TOKEN }}
       SENZING_MEMBERS: ${{ secrets.SENZING_MEMBERS }}

.github/workflows/add-to-project-garage-dependabot.yaml

@@ -1,21 +1,16 @@
-name: add-to-project-garage-dependabot.yaml
+name: add to project garage dependabot
+
 on:
   pull_request:
-    types:
-      - opened
-      - reopened
-env:
-  CREATOR: ${{ github.event.pull_request.user.login }}
+    branches: [main]
+
+permissions:
+  repository-projects: write
+
 jobs:
-  add-to-project:
-    name: Add dependabot pull request to project
-    runs-on: ubuntu-latest
-    steps:
-      - name: Assign pull request to project
-        env:
-          BOOL: ${{ contains( env.CREATOR, 'dependabot' ) }}
-        if: ${{ env.BOOL == 'true' }}
-        uses: actions/add-to-project@v0.5.0
-        with:
-          project-url: https://github.com/orgs/senzing-garage/projects/3
-          github-token: ${{ secrets.SENZING_GITHUB_ACCESS_TOKEN }}
+  add-to-project-dependabot:
+    secrets:
+      SENZING_GITHUB_PROJECT_RW_TOKEN: ${{ secrets.SENZING_GITHUB_PROJECT_RW_TOKEN }}
+    uses: senzing-factory/build-resources/.github/workflows/add-to-project-dependabot.yaml@v1
+    with:
+      project: ${{ vars.SENZING_PROJECT_GARAGE }}

.github/workflows/add-to-project-garage.yaml

@@ -1,16 +1,20 @@
-name: add-to-project-garage.yaml
+name: add to project garage
+
 on:
   issues:
     types:
-      - reopened
       - opened
+      - reopened
+
+permissions:
+  repository-projects: write
+
 jobs:
   add-to-project:
-    name: Add issue to project
-    runs-on: ubuntu-latest
-    steps:
-      - name: Assign issue to project
-        uses: actions/add-to-project@v0.5.0
-        with:
-          project-url: https://github.com/orgs/senzing-garage/projects/3
-          github-token: ${{ secrets.SENZING_GITHUB_ACCESS_TOKEN }}
+    secrets:
+      SENZING_GITHUB_PROJECT_RW_TOKEN: ${{ secrets.SENZING_GITHUB_PROJECT_RW_TOKEN }}
+    uses: senzing-factory/build-resources/.github/workflows/add-to-project.yaml@v1
+    with:
+      classic: false
+      project-number: ${{ vars.SENZING_PROJECT_GARAGE }}
+      org: ${{ vars.SENZING_GITHUB_ACCOUNT_NAME }}

.github/workflows/dependabot-approve-and-merge.yaml

@@ -1,12 +1,14 @@
-name: dependabot-approve-and-merge.yaml
+name: dependabot approve and merge
+
 on:
   pull_request:
     branches: [main]
+
 jobs:
   dependabot-approve-and-merge:
     permissions:
       contents: write
       pull-requests: write
-    uses: senzing-factory/build-resources/.github/workflows/dependabot-approve-and-merge.yaml@main
     secrets:
       SENZING_GITHUB_CODEOWNER_PR_RW_TOKEN: ${{ secrets.SENZING_GITHUB_CODEOWNER_PR_RW_TOKEN }}
+    uses: senzing-factory/build-resources/.github/workflows/dependabot-approve-and-merge.yaml@v1

.github/workflows/docker-build-container.yaml

@@ -1,16 +1,25 @@
-name: docker-build-container.yaml
+name: docker build container
+
 on:
   pull_request:
     branches:
       - main
   workflow_dispatch:
+
 jobs:
   docker-build-container:
     runs-on: ubuntu-latest
+
     steps:
-      - name: Build docker image
-        uses: senzing-factory/github-action-docker-buildx-build@latest
+      - name: get repo name
+        id: repo-basename
+        run: |
+          echo "repo=$(basename ${{ github.repository }})" >> "$GITHUB_OUTPUT"
+        shell: bash
+
+      - name: build docker image
+        uses: senzing-factory/github-action-docker-buildx-build@v1
         with:
-          image-repository: senzing/validate
+          image-repository: senzing/${{ steps.repo-basename.outputs.repo }}
           password: ${{ secrets.DOCKERHUB_ACCESS_TOKEN }}
           username: ${{ secrets.DOCKERHUB_USERNAME }}

.github/workflows/go-proxy-pull.yaml

@@ -1,10 +1,4 @@
-# Based on
-# - https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions
-# - https://github.com/marketplace/actions/go-proxy-warming
-# - https://github.com/andrewslotin/go-proxy-pull-action
-# - https://futurestud.io/tutorials/github-actions-run-a-workflow-when-creating-a-tag
-
-name: go-proxy-pull.yaml
+name: go proxy pull
 
 on:
   push:
@@ -17,8 +11,9 @@ permissions:
 jobs:
   go-proxy-pull:
     runs-on: ubuntu-latest
+
     steps:
-      - name: Pull new module version
+      - name: pull new module version
         uses: andrewslotin/go-proxy-pull-action@v1.1.0
         with:
           import_path: github.com/senzing-garage/validate

.github/workflows/go-test-darwin.yaml

@@ -1,7 +1,4 @@
-# Based on
-# - https://github.com/marketplace/actions/setup-go-environment
-
-name: go-test-darwin.yaml
+name: go test darwin
 
 on: [push]
 
@@ -10,20 +7,23 @@ permissions:
 
 jobs:
   go-test-darwin:
+    name: "go test with OS: ${{ matrix.os }}; Go: ${{ matrix.go }}"
     runs-on: ${{ matrix.os }}
     strategy:
       matrix:
         go: ["1.21"]
         os: [macos-latest]
-    name: "go test with OS: ${{ matrix.os }}; Go: ${{ matrix.go }}"
+
     steps:
-      - name: Checkout repository
+      - name: checkout repository
         uses: actions/checkout@v4
         with:
           fetch-depth: 0
-      - name: Setup go
+
+      - name: setup go
         uses: actions/setup-go@v5
         with:
           go-version: ${{ matrix.go }}
-      - name: Run go test
+
+      - name: run go test
         run: go test -v -p 1 ./...

.github/workflows/go-test-linux.yaml

@@ -1,7 +1,4 @@
-# Based on
-# - https://github.com/marketplace/actions/setup-go-environment
-
-name: go-test-linux.yaml
+name: go test linux
 
 on: [push]
 
@@ -10,20 +7,23 @@ permissions:
 
 jobs:
   go-test-linux:
+    name: "go test with OS: ${{ matrix.os }}; Go: ${{ matrix.go }}"
     runs-on: ${{ matrix.os }}
     strategy:
       matrix:
         go: ["1.21"]
         os: [ubuntu-latest]
-    name: "go test with OS: ${{ matrix.os }}; Go: ${{ matrix.go }}"
+
     steps:
-      - name: Checkout repository
+      - name: checkout repository
         uses: actions/checkout@v4
         with:
           fetch-depth: 0
-      - name: Setup go
+
+      - name: setup go
         uses: actions/setup-go@v5
         with:
           go-version: ${{ matrix.go }}
-      - name: Run go test
+
+      - name: run go test
         run: go test -v -p 1 ./...

.github/workflows/go-test-windows.yaml

@@ -1,7 +1,4 @@
-# Based on
-# - https://github.com/marketplace/actions/setup-go-environment
-
-name: go-test-windows.yaml
+name: go test windows
 
 on: [push]
 
@@ -10,20 +7,23 @@ permissions:
 
 jobs:
   go-test-windows:
+    name: "go test with OS: ${{ matrix.os }}; Go: ${{ matrix.go }}"
     runs-on: ${{ matrix.os }}
     strategy:
       matrix:
         go: ["1.21"]
         os: [windows-latest]
-    name: "go test with OS: ${{ matrix.os }}; Go: ${{ matrix.go }}"
+
     steps:
-      - name: Checkout repository
+      - name: checkout repository
         uses: actions/checkout@v4
         with:
           fetch-depth: 0
-      - name: Setup go
+
+      - name: setup go
         uses: actions/setup-go@v5
         with:
           go-version: ${{ matrix.go }}
-      - name: Run go test
+
+      - name: run go test
         run: go test -v -p 1 ./...

.github/workflows/gofmt.yaml

@@ -1,4 +1,4 @@
-name: gofmt.yaml
+name: gofmt
 
 on:
   pull_request:
@@ -9,4 +9,4 @@ permissions:
 
 jobs:
   gofmt:
-    uses: senzing-factory/build-resources/.github/workflows/gofmt.yaml@main
+    uses: senzing-factory/build-resources/.github/workflows/gofmt.yaml@v1

.github/workflows/gosec.yaml

@@ -1,7 +1,4 @@
-# Based on
-# - https://github.com/securego/gosec
-
-name: gosec.yaml
+name: gosec
 
 on:
   push:
@@ -19,10 +16,12 @@ jobs:
     runs-on: ubuntu-latest
     env:
       GO111MODULE: on
+
     steps:
-      - name: Checkout Source
+      - name: checkout repository
         uses: actions/checkout@v4
-      - name: Run Gosec Security Scanner
-        uses: securego/gosec@master
+
+      - name: run Gosec Security Scanner
+        uses: securego/gosec@v2.19.0
         with:
           args: ./...

.github/workflows/lint-workflows.yaml

@@ -0,0 +1,17 @@
+name: lint workflows
+
+on:
+  push:
+    branches-ignore: [main]
+  pull_request:
+    branches: [main]
+
+permissions:
+  contents: read
+  packages: read
+  pull-requests: read
+  statuses: write
+
+jobs:
+  lint-workflows:
+    uses: senzing-factory/build-resources/.github/workflows/lint-workflows.yaml@v1

.github/workflows/make-go-github-file.yaml

@@ -1,4 +1,4 @@
-name: make-go-github-file.yaml
+name: make go github file
 
 on:
   push:
@@ -7,11 +7,12 @@ on:
 
 permissions:
   contents: write
+  pull-requests: write
 
 jobs:
   make-go-github-file:
-    uses: senzing-factory/build-resources/.github/workflows/make-go-github-file.yaml@main
     secrets:
-      SENZING_GITHUB_GPG_PRIVATE_KEY: ${{ secrets.SENZING_GITHUB_GPG_PRIVATE_KEY }}
-      SENZING_GITHUB_GPG_PASSPHRASE: ${{ secrets.SENZING_GITHUB_GPG_PASSPHRASE }}
       SENZING_GITHUB_ACTOR: ${{ secrets.SENZING_GITHUB_ACTOR }}
+      SENZING_GITHUB_GPG_PASSPHRASE: ${{ secrets.SENZING_GITHUB_GPG_PASSPHRASE }}
+      SENZING_GITHUB_GPG_PRIVATE_KEY: ${{ secrets.SENZING_GITHUB_GPG_PRIVATE_KEY }}
+    uses: senzing-factory/build-resources/.github/workflows/make-go-github-file.yaml@v1

.github/workflows/make-go-tag.yaml

@@ -1,4 +1,4 @@
-name: make-go-tag.yaml
+name: make go tag
 
 on:
   push:
@@ -10,10 +10,12 @@ permissions:
 
 jobs:
   make-go-tag:
-    name: Make a vM.m.P tag
+    name: make a vM.m.P tag
     runs-on: ubuntu-latest
+
     steps:
-      - name: Checkout repository
+      - name: checkout repository
         uses: actions/checkout@v4
-      - name: Make go version tag
-        uses: senzing-factory/github-action-make-go-tag@main
+
+      - name: make go version tag
+        uses: senzing-factory/github-action-make-go-tag@v1

.github/workflows/move-pr-to-done-dependabot.yaml

@@ -0,0 +1,17 @@
+name: move pr to done dependabot
+
+on:
+  pull_request:
+    branches: [main]
+    types: [closed]
+
+permissions:
+  repository-projects: write
+
+jobs:
+  move-pr-to-done-dependabot:
+    secrets:
+      SENZING_GITHUB_PROJECT_RW_TOKEN: ${{ secrets.SENZING_GITHUB_PROJECT_RW_TOKEN }}
+    uses: senzing-factory/build-resources/.github/workflows/move-pr-to-done-dependabot.yaml@v1
+    with:
+      project: ${{ vars.SENZING_PROJECT_GARAGE }}