Merge pull request #23 from konstruktoid/gha

add security policy and pin gha releases

.github/workflows/issues.yml

@@ -14,6 +14,6 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: 'auto-assign issue'
-        uses: pozil/[email protected]
+        uses: pozil/auto-assign-issue@74b9f64cc1a08f99358061073e243a4c3d7dd5c4 # v1.11.0
         with:
           assignees: konstruktoid

.github/workflows/slsa.yml

@@ -20,7 +20,7 @@ jobs:
         shell: bash
 
       - name: Checkout repository
-        uses: actions/checkout@master
+        uses: actions/checkout@24cb9080177205b6e8c946b17badbe402adc938f # master
 
       - name: Build artifacts
         run: |
@@ -60,7 +60,7 @@ jobs:
         shell: bash
 
       - name: Download ${{ env.REPOSITORY_NAME }}.sha256
-        uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2
+        uses: actions/download-artifact@cbed621e49e4c01b044d60f6c80ea4ed6328b281 # v2.1.1
         with:
           name: ${{ env.REPOSITORY_NAME }}.sha256
 

README.md

@@ -9,7 +9,7 @@ running as a local DNS on a small network.
 
 > **Note**
 >
-> This is currently a skeleton repository, do not use.
+> Do not use this role without first testing in a non-operational environment.
 
 ## Defaults
 

SECURITY.md

@@ -0,0 +1,10 @@
+# Security Policy
+
+## Supported Versions
+
+The current [upstream](https://github.com/konstruktoid/ansible-role-dns)
+and the [latest published version](https://github.com/konstruktoid/ansible-role-dns/releases) are supported.
+
+## Reporting a Bug or Vulnerability
+
+If you found a bug or vulnerability or just something odd, feel free to submit a issue or improve the code by creating a pull request.

action-lint/Dockerfile

@@ -5,8 +5,8 @@ LABEL "com.github.actions.description"="Upstream main ansible-lint"
 LABEL "com.github.actions.icon"="shield"
 LABEL "com.github.actions.color"="purple"
 
-LABEL "repository"="https://github.com/konstruktoid/ansible-role-hardening"
-LABEL "homepage"="https://github.com/konstruktoid/ansible-role-hardening"
+LABEL "repository"="https://github.com/konstruktoid/ansible-role-dns"
+LABEL "homepage"="https://github.com/konstruktoid/ansible-role-dns"
 LABEL "maintainer"="Thomas Sjögren <[email protected]>"
 
 ENV CRYPTOGRAPHY_DONT_BUILD_RUST 1