Merge branch 'LedgerHQ:main' into mainARCHITECTURAL-SERVICE

.github/workflows/lint.yml

@@ -23,6 +23,9 @@ jobs:
     name: Lint
     # Set the agent to run on
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      statuses: write
 
     ##################
     # Load all steps #
@@ -42,11 +45,13 @@ jobs:
       # Run Linter against code base #
       ################################
       - name: Lint
-        uses: github/super-linter@v5.0.0
+        uses: github/super-linter@v7
         env:
           VALIDATE_ALL_CODEBASE: false
           DEFAULT_BRANCH: main
-          GITHUB_TOKEN: ${{ secrets.CI_BOT_TOKEN }}
+          GITHUB_TOKEN: ${{ github.token }}
           # since we are only interested in linting the allowlist JSON file
           VALIDATE_MARKDOWN: false
           VALIDATE_NATURAL_LANGUAGE: false
+          VALIDATE_JSCPD: false
+          VALIDATE_CHECKOV: false

.github/workflows/merge-dapp.yml

@@ -21,10 +21,13 @@ jobs:
   merge:
     runs-on: ubuntu-latest
     name: Merge dApps assets lists
+    permissions:
+      contents: 'write'
     steps:
       - uses: actions/checkout@v4
         with:
           fetch-depth: 0
+          token: ${{ secrets.CI_BOT_TOKEN }}
       - uses: coursier/cache-action@v6
       - uses: VirtusLab/scala-cli-setup@main
         with:

.github/workflows/trigger-merge-dapp.yml

@@ -16,7 +16,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Dispatch QA workflow
-        uses: benc-uk/[email protected].3
+        uses: benc-uk/[email protected].4
         with:
           workflow: merge-dapp.yml
           token: ${{ secrets.CI_BOT_TOKEN }}

.gitignore

@@ -5,5 +5,6 @@ scripts/.scala-build/
 .vscode/*
 .github/scripts/.bsp
 Kleros_update_logs.txt
+setup.cfg
 PR_comments.txt
 .bsp

CODEOWNERS

@@ -1 +1 @@
-* @wahtique @onouguier-ledger @ascott-ledger @rowkee @ldg-github-ci
+* @LedgerHQ/backend-core