Merge branch 'main' into break-system-packages

Author: aegilops

action.yml

@@ -63,11 +63,13 @@ runs:
   steps:
     - name: Checkout code
       uses: actions/checkout@v4
+
     - name: Set up Python
       id: setup-python
       uses: actions/setup-python@v4
       with:
         python-version: ${{ inputs.python-version }}
+
     - name: Run Python Lint
       run: |
         echo "::debug::Running Python Lint for ${INPUTS_LINTER} on ${INPUTS_TARGET} with Python ${INPUTS_PYTHON_VERSION}"
@@ -208,14 +210,16 @@ runs:
         INPUTS_TYPESHED_VERSION: ${{ inputs.typeshed-version }}
         GH_TOKEN: ${{ github.token }}
       shell: bash
+
     - name: Upload SARIF
       if: ${{ hashFiles(inputs.output) != '' }}
       uses: github/codeql-action/upload-sarif@v3
       with:
         sarif_file: ${{ inputs.output }}
+
     - name: Upload SARIF as debug artefact
       if: ${{ always() && runner.debug == '1' && hashFiles(inputs.output) != '' }}
-      uses: actions/upload-artifact@v3
+      uses: actions/upload-artifact@v4
       with:
         name: ${{ inputs.output }}
         path: ${{ inputs.output }}

starter-workflow.yml

@@ -1,4 +1,4 @@
-name: Python Lint Workflow
+name: Python Lint
 on:
   push:
     branches: [ "main" ]
@@ -8,15 +8,23 @@ on:
   schedule:
     - cron: '22 3 * * 2'  # please pick a different time
   workflow_dispatch:
+
+permissions:
+  contents: read
+  actions: read
+  security-events: write
+
 jobs:
   lint:
     runs-on: ubuntu-latest
+    
     strategy:
       matrix:
         linter: [flake8, pylint, ruff, mypy, pytype, pyright, fixit]
       fail-fast: false
+
     steps:
-      - name: Run Python Lint
+      - name: Python Lint
         uses: advanced-security/python-lint-code-scanning-action@v1
         with:
           linter: ${{ matrix.linter }}