Bump google/cloud-sdk from 439.0.0-alpine to 473.0.0-alpine (#34)

* Bump google/cloud-sdk from 439.0.0-alpine to 473.0.0-alpine

Bumps google/cloud-sdk from 439.0.0-alpine to 473.0.0-alpine.

---
updated-dependencies:
- dependency-name: google/cloud-sdk
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>

* update action permissions

Signed-off-by: André Bauer <[email protected]>

* install aws-cli via pak

Signed-off-by: André Bauer <[email protected]>

* update superlinter

Signed-off-by: André Bauer <[email protected]>

* fetch depth

Signed-off-by: André Bauer <[email protected]>

* disable healthcheck

Signed-off-by: André Bauer <[email protected]>

* disable shfmt

Signed-off-by: André Bauer <[email protected]>

---------

Signed-off-by: dependabot[bot] <[email protected]>
Signed-off-by: André Bauer <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: André Bauer <[email protected]>
Co-authored-by: André Bauer <[email protected]>

Author: dependabot[bot]

.github/workflows/ci.yaml

@@ -1,21 +1,28 @@
 ---
 name: ci
 
-on: 
+permissions: read-all
+
+on:
   pull_request:
 
 jobs:
   super-linter:
+    permissions:
+      statuses: write
     runs-on: ubuntu-22.04
     steps:
       - name: Checkout Code
         uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
 
       - name: Lint Code Base
-        uses: github/super-linter/slim@v5
+        uses: github/super-linter/slim@v6
         env:
           DEFAULT_BRANCH: main
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          VALIDATE_SHELL_SHFMT: false
 
   docker-build:
     runs-on: ubuntu-22.04

.github/workflows/dependabot-auto-merge.yaml

@@ -1,11 +1,15 @@
 ---
 name: dependabot-auto-merge
 
+permissions: read-all
+
 on:
   pull_request:
 
 jobs:
   auto-merge:
+    permissions:
+      contents: write
     runs-on: ubuntu-22.04
     steps:
       - uses: actions/checkout@v4

.github/workflows/release-drafter.yaml

@@ -1,16 +1,16 @@
 ---
 name: Release Drafter
 
+permissions:
+  contents: read
+
 on:
   push:
     branches:
       - main
   pull_request:
     types: [opened, reopened, synchronize]
 
-permissions:
-  contents: read
-
 jobs:
   update_release_draft:
     permissions:

.github/workflows/release.yaml

@@ -1,6 +1,8 @@
 ---
 name: release
 
+permissions: read-all
+
 on:
   push:
     branches:
@@ -10,6 +12,10 @@ on:
 
 jobs:
   docker-build-push:
+    permissions:
+      contents: read
+      id-token: write
+      packages: write
     runs-on: ubuntu-22.04
     steps:
       - name: Checkout Code

Dockerfile

@@ -1,13 +1,14 @@
-FROM google/cloud-sdk:439.0.0-alpine
+FROM google/cloud-sdk:473.0.0-alpine
 
 COPY entrypoint.sh /
 
 # hadolint ignore=DL3013,DL3018
-RUN apk add --no-cache mysql-client py3-pip rsync && \
-    pip3 install --no-cache-dir awscli && \
+RUN apk add --no-cache aws-cli mysql-client rsync && \
     rm -rf /var/cache/apk/* && \
     chmod +x /entrypoint.sh
 
+#checkov:skip=CKV_DOCKER_2:We don't need Docker HEALTHCHECK in Kubernetes
+
 USER cloudsdk
 
 ENTRYPOINT ["/entrypoint.sh"]