feat: support jobs without rights field

* Support jobs without `rights` field
* Pin Python 3.12.3 to avoid forward ref error in Pydantic.

.github/workflows/ci.yml

@@ -12,14 +12,16 @@ jobs:
   commitlint:
     runs-on: ubuntu-22.04
     steps:
-      - uses: actions/checkout@v4
+      - name: Checkout
+        uses: actions/checkout@v4
         with:
           fetch-depth: 0
       - uses: wagoid/commitlint-github-action@v4
   test:
     runs-on: ubuntu-22.04
     steps:
-      - uses: actions/checkout@v4
+      - name: Checkout
+        uses: actions/checkout@v4
       - name: Setup Docker
         uses: docker/setup-buildx-action@v3
       - name: Build
@@ -38,8 +40,10 @@ jobs:
     needs: [commitlint, test]
     if: github.event_name == 'push'
     steps:
-      - uses: actions/checkout@v4
-      - uses: actions/setup-node@v4
+      - name: Checkout
+        uses: actions/checkout@v4
+      - name: Setup Node.js
+        uses: actions/setup-node@v4
         with:
           node-version: 20
       - name: Install semantic-release

Dockerfile

@@ -14,7 +14,7 @@ RUN wget https://github.com/BenLangmead/bowtie2/releases/download/v2.3.2/bowtie2
     mkdir bowtie2 && \
     cp bowtie2-2.3.2-legacy/bowtie2* bowtie2
 
-FROM python:3.12-bookworm as build
+FROM python:3.12.3-bookworm as build
 WORKDIR /workflow
 RUN curl -sSL https://install.python-poetry.org | python -
 ENV PATH="/root/.local/bin:${PATH}" \
@@ -25,7 +25,7 @@ ENV PATH="/root/.local/bin:${PATH}" \
 COPY pyproject.toml poetry.lock ./
 RUN poetry install --without dev --no-root
 
-FROM python:3.12-bookworm as base
+FROM python:3.12.3-bookworm as base
 WORKDIR /workflow
 ENV VIRTUAL_ENV=/app/.venv \
     PATH="/workflow/.venv/bin:/opt/fastqc:${PATH}"