Update linter.yml

.github/workflows/linter.yml

@@ -1,34 +1,47 @@
-name: Lint Code Base
+name: Lint
 
 on:
-    workflow_dispatch:
-    push:
-        branches: main
-        paths:
-            - "**.sh"
-            - ".github/workflows/linter.yml"
-            - "bin/**"
-    pull_request:
-        branches: main
-        paths:
-            - "**.sh"
-            - ".github/workflows/linter.yml"
-            - "bin/**"
+  workflow_dispatch:
+  push:
+    branches: main
+    paths:
+        - "**.sh"
+        - ".github/workflows/linter.yml"
+        - "bin/**"
+  pull_request:
+    branches: main
+    paths:
+        - "**.sh"
+        - ".github/workflows/linter.yml"
+        - "bin/**"
+
+permissions: {}
+
 jobs:
-    build:
-        name: Lint Code Base
-        runs-on: ubuntu-latest
-        steps:
-            - name: Checkout Code
-              uses: actions/checkout@v2
-              with:
-                  # Full git history is needed to get a proper list of changed files within `super-linter`
-                  fetch-depth: 0
-            - name: Lint Code Base
-              uses: github/super-linter@v4
-              env:
-                  VALIDATE_ALL_CODEBASE: true
-                  VALIDATE_BASH: true
-                  DEFAULT_BRANCH: main
-                  GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-                  IGNORE_GENERATED_FILES: true
+  build:
+    name: Lint
+    runs-on: ubuntu-latest
+
+    permissions:
+      contents: read
+      packages: read
+      # To report GitHub Actions status checks
+      statuses: write
+
+    steps:
+      - name: Checkout Code
+        uses: actions/checkout@v4
+        with:
+          # super-linter needs the full git history to get the
+          # list of files that changed across commits
+          fetch-depth: 0
+
+      - name: Super-linter
+        uses: super-linter/super-linter@v7.3.0
+        env:
+          # To report GitHub Actions status checks
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          DEFAULT_BRANCH: main
+          VALIDATE_ALL_CODEBASE: true
+          VALIDATE_BASH: true
+          IGNORE_GENERATED_FILES: true