modify: refactor workflows

.github/workflows/main.yml → .github/workflows/check-code-quality.yml

@@ -5,6 +5,8 @@ on: [push]
 jobs:
   build:
     timeout-minutes: 10
+    permissions:
+      contents: read
     runs-on: ubuntu-latest
 
     steps:
@@ -17,27 +19,18 @@ jobs:
           cache: npm
 
       - name: npm install
-        run: npm ci
+        run: npm ci --no-audit --no-fund
 
       - name: lint
         run: npm run lint
 
+      - name: build source
+        run: npm run build
+
       - name: test
         run: |
           npm run test:ci
           npx [email protected]
 
       - name: build storybook
         run: npm run build-storybook
-
-      - uses: actions/cache@88522ab9f39a2ea568f7027eddc7d8d8bc9d59c8 # v3
-        with:
-          path: |
-            ~/.npm
-            ${{ github.workspace }}/.next/cache
-          key: ${{ runner.os }}-nextjs-${{ hashFiles('**/package-lock.json') }}-${{ hashFiles('**.[jt]s', '**.[jt]sx') }}
-          restore-keys: |
-            ${{ runner.os }}-nextjs-${{ hashFiles('**/package-lock.json') }}-
-
-      - name: build source
-        run: npm run build

.github/workflows/check-renovate-config.yml

@@ -8,6 +8,8 @@ on:
 jobs:
   build:
     timeout-minutes: 10
+    permissions:
+      contents: read
     runs-on: ubuntu-latest
 
     steps:
@@ -17,7 +19,6 @@ jobs:
         uses: actions/setup-node@64ed1c7eab4cce3362f8c340dee64e5eaeef8f7c # v3
         with:
           node-version-file: .node-version
-          cache: npm
 
       - name: validate renovate config
         run: npx --package renovate -c 'renovate-config-validator'

.github/workflows/codeql-analysis.yml

@@ -7,17 +7,19 @@ name: "CodeQL"
 
 on:
   push:
-    branches: [master]
+    branches: [main]
   pull_request:
     # The branches below must be a subset of the branches above
-    branches: [master]
+    branches: [main]
   schedule:
     - cron: '0 19 * * 5'
 
 jobs:
   analyze:
     name: Analyze
     timeout-minutes: 10
+    permissions:
+      security-events: write
     runs-on: ubuntu-latest
 
     strategy:

README.md

@@ -1,4 +1,4 @@
-nextjs-boilerplate [![CircleCI](https://circleci.com/gh/sota1235/nextjs-boilerplate.svg?style=svg)](https://circleci.com/gh/sota1235/nextjs-boilerplate) [![codecov](https://codecov.io/gh/sota1235/nextjs-boilerplate/branch/master/graph/badge.svg)](https://codecov.io/gh/sota1235/nextjs-boilerplate)
+nextjs-boilerplate [![codecov](https://codecov.io/gh/sota1235/nextjs-boilerplate/branch/master/graph/badge.svg)](https://codecov.io/gh/sota1235/nextjs-boilerplate)
 ====
 
 Boilerplate for using Next.js including base setup.

renovate.json

@@ -1,6 +1,6 @@
 {
   "$schema": "https://docs.renovatebot.com/renovate-schema.json",
   "extends": [
-    "github>sota1235/renovate-config"
+    "github>sota1235/renovate-config:0.0.3"
   ]
 }