super-linterによる指摘事項修正

.github/workflows/add-to-task-list.yml

@@ -7,6 +7,7 @@ on:
   issues:
     types:
       - opened
+permissions: read-all
 jobs:
   add-to-task-list:
     runs-on: ubuntu-latest

.github/workflows/github-actions-cache-cleaner.yml

@@ -7,6 +7,7 @@ on:
   schedule:
     - cron: '0 21 * * *' # 06:00 JST
   workflow_dispatch:
+permissions: read-all
 jobs:
   github-actions-cache-cleaner:
     runs-on: ubuntu-latest

.github/workflows/super-linter.yml

@@ -18,6 +18,10 @@ on:
     branches:
       - main
   pull_request:
+permissions:
+  contents: read
+  packages: read
+  statuses: write
 ###############
 # Set the Job #
 ###############

.github/workflows/update-package.yml

@@ -10,13 +10,13 @@ on:
   push:
     branches:
       - main
+permissions:
+  contents: write
+  pull-requests: write
 jobs:
   # npm installを実行し、package.jsonやpackage-lock.jsonに差分があればPRを作る
   update-package:
     runs-on: ubuntu-latest
-    permissions:
-      contents: write
-      pull-requests: write
     steps:
       - uses: actions/[email protected]
         if: github.event_name != 'pull_request' || github.event.action != 'closed'

scripts/super_linter/build/set_path.sh

@@ -3,4 +3,4 @@
 npm ci --prefer-offline
 action="$(yq '.jobs.build.steps[-1].uses' .github/workflows/super-linter.yml)"
 PATH="$(docker run --rm --entrypoint '' "ghcr.io/${action//\/slim@/:slim-}" /bin/sh -c 'echo $PATH')"
-echo "PATH=/github/workspace/node_modules/.bin:${PATH}" >> "$GITHUB_ENV"
+echo "PATH=/github/workspace/node_modules/.bin:${PATH}" >>"$GITHUB_ENV"