ci: apply part of ci-cd-templates' analyze-commits job

Sudwest-Fryslan · Aug 1, 2024 · 9a8fae1 · 9a8fae1
1 parent 0b42618
commit 9a8fae1
Showing 1 changed file with 28 additions and 29 deletions.
diff --git a/.github/workflows/ci-build.yml b/.github/workflows/ci-build.yml
@@ -11,36 +11,35 @@ on:
 jobs:
   analyze-commits:
     runs-on: ubuntu-latest
-    steps:
-    -
-      name: Echo DOCKER_IMAGE_REPOSITORY
-      run: "echo DOCKER_IMAGE_REPOSITORY: '${{ vars.DOCKER_IMAGE_REPOSITORY }}'"
-    - 
-      name: Checkout
-      uses: actions/checkout@v3
-      with: 
-        token: ${{ secrets.GITHUB_TOKEN }}
-    - 
-      name: "🔧 setup node"
-      uses: actions/setup-node@v2.1.5
-      with:
-        node-version: 20.x
-    -
-      name: "Install plugin for semantic-release"
-      run: npm install @google/semantic-release-replace-plugin -D
-    - 
-      name: Install dependencies
-      run: yarn global add semantic-release @semantic-release/changelog @semantic-release/git @semantic-release/github @semantic-release/exec @semantic-release/release-notes-generator @semantic-release/commit-analyzer@10.0.1 conventional-changelog-conventionalcommits@6.1.0
-    -
-      name: Get next version
-      id: next-version
-      run: semantic-release --dryRun
-      env:
-        GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-        GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
     outputs:
-      release-tag: ${{ steps.next-version.outputs.release-tag }}
-      release-version: ${{ steps.next-version.outputs.release-version }}
+      version-next: ${{ steps.next-version.outputs.release-version }}
+      version-next-tag: ${{ steps.next-version.outputs.release-tag }}
+      version-next-type: ${{ steps.next-version.outputs.release-type }}
+    steps:
+      - uses: step-security/harden-runner@63c24ba6bd7ba022e95695ff85de572c04a18142 # v2.7.0
+        with:
+          disable-sudo: true
+          egress-policy: audit
+          allowed-endpoints: >
+            github.com:443
+  
+      - name: Checkout
+        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 #4.1.1
+
+      - name: Setup Node
+        uses: actions/setup-node@60edb5dd545a775178f52524783378180af0d1f8 #4.0.2
+        with:
+          node-version: 20
+
+      - name: Install dependencies
+        run: yarn global add semantic-release @semantic-release/changelog @semantic-release/git @semantic-release/github @semantic-release/exec @semantic-release/release-notes-generator @semantic-release/commit-analyzer conventional-changelog-conventionalcommits
+
+      - name: Get next version
+        id: next-version
+        run: semantic-release --dryRun
+        env:
+          GITHUB_TOKEN: ${{ secrets.GH_TOKEN }}
+          GH_TOKEN: ${{ secrets.GH_TOKEN }}
 
   docker:
     uses: ./.github/workflows/docker-build-and-push-workflow.yml