chore: Updated automation to support PR acceptance tests

Signed-off-by: Steve Hipwell <[email protected]>

.github/workflows/add_to_octokit_project.yml → .github/workflows/add-to-octokit-project.yaml

@@ -1,18 +1,24 @@
-name: Add PRs and issues to Octokit org project
+name: Add PRs & Issues to Octokit Org Project
 
 on:
   issues:
     types: [reopened, opened]
   pull_request_target:
     types: [reopened, opened]
 
+permissions: read-all
+
 jobs:
   add-to-project:
-    name: Add issue to project
+    name: Add to Project
     runs-on: ubuntu-latest
     continue-on-error: true
+    defaults:
+      run:
+        shell: bash
     steps:
-      - uses: actions/[email protected]
+      - name: Add to project
+        uses: actions/add-to-project@244f685bbc3b7adfa8466e08b698b5577571133e # v1.0.2
         with:
           project-url: https://github.com/orgs/octokit/projects/10
           github-token: ${{ secrets.OCTOKITBOT_PROJECT_ACTION_TOKEN }}

.github/workflows/ci.yaml

@@ -0,0 +1,32 @@
+name: GitHub Actions CI
+
+on:
+  workflow_dispatch:
+  push:
+    branches: [main]
+  pull_request: {}
+
+permissions: read-all
+
+jobs:
+  ci:
+    name: CI
+    runs-on: ubuntu-latest
+    defaults:
+      run:
+        shell: bash
+    env:
+      GITHUB_TEST_ORGANIZATION: kfcampbell-terraform-provider
+    steps:
+      - name: Checkout
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - name: Set-up Go
+        uses: actions/setup-go@41dfa10bad2bb2ae585af6ee5bb4d7d973ad74ed # v5.1.0
+        with:
+          go-version-file: go.mod
+          cache: true
+      - run: make tools
+      - run: make lint
+      - run: make website-lint
+      - run: make build
+      - run: make test

.github/workflows/codeql.yml → .github/workflows/codeql.yaml

@@ -1,6 +1,7 @@
-name: "CodeQL"
+name: CodeQL
 
 on:
+  workflow_dispatch:
   push:
     branches: [ "main" ]
   pull_request:
@@ -9,6 +10,8 @@ on:
   schedule:
     - cron: '16 7 * * 5'
 
+permissions: read-all
+
 jobs:
   analyze:
     name: Analyze
@@ -17,17 +20,19 @@ jobs:
       actions: read
       contents: read
       security-events: write
-
     strategy:
       fail-fast: false
       matrix:
         language: [ 'go' ]
-
+    defaults:
+      run:
+        shell: bash
     steps:
-      - name: Checkout repository
+      - name: Checkout
         uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
 
-      - uses: actions/setup-go@41dfa10bad2bb2ae585af6ee5bb4d7d973ad74ed # v5.1.0
+      - name: Set-up Go
+        uses: actions/setup-go@41dfa10bad2bb2ae585af6ee5bb4d7d973ad74ed # v5.1.0
         with:
           go-version-file: 'go.mod'
           cache: true