[ci] migrate super-linter to action

Signed-off-by: Jan-Otto Kröpke <[email protected]>

.github/workflows/check-codeowners.yaml

@@ -1,9 +1,12 @@
 name: Check CODEOWNERS
+permissions: {}
 
 on: pull_request
 jobs:
   build:
     runs-on: ubuntu-22.04
+    permissions:
+      contents: read
     steps:
       - name: Checkout Code
         uses: actions/checkout@v4

.github/workflows/lint-test.yaml

@@ -1,10 +1,13 @@
 name: Lint and Test Charts
+permissions: {}
 
 on: pull_request
 
 jobs:
   lint-test:
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
     steps:
       - name: Checkout Code
         uses: actions/checkout@v4

.github/workflows/release.yaml

@@ -1,4 +1,5 @@
 name: Release Charts
+permissions: {}
 
 on:
   push:

.github/workflows/superlinter.yml

@@ -1,4 +1,5 @@
 name: Lint Code Base
+permissions: {}
 
 # Documentation:
 # https://help.github.com/en/articles/workflow-syntax-for-github-actions
@@ -9,23 +10,33 @@ jobs:
   build:
     name: Lint Code Base
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
     steps:
       - name: Checkout Code
         uses: actions/checkout@v4
         with:
           fetch-depth: 0
 
       - name: Lint Code Base
-        uses: docker://github/super-linter:slim-v4
+        uses: super-linter/super-linter/slim@v7.2.1
         env:
-          DEFAULT_BRANCH: main
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
           LINTER_RULES_PATH: .github/linters
+          MULTI_STATUS: false
           VALIDATE_ALL_CODEBASE: false
-          VALIDATE_BASH: false
-          VALIDATE_JSCPD: false
-          VALIDATE_KUBERNETES_KUBEVAL: false
-          VALIDATE_PYTHON: false
-          VALIDATE_PYTHON_FLAKE8: false
-          VALIDATE_PYTHON_BLACK: false
-          VALIDATE_YAML: false
+          VALIDATE_BASH: true
+          VALIDATE_BASH_EXEC: true
+          # VALIDATE_CHECKOV: true - always scans everything and all charts have too much errors
+          VALIDATE_EDITORCONFIG: true
+          VALIDATE_ENV: true
+          VALIDATE_GITHUB_ACTIONS: true
+          VALIDATE_GITLEAKS: true
+          VALIDATE_JSON: true
+          VALIDATE_MARKDOWN: true
+          VALIDATE_NATURAL_LANGUAGE: true
+          VALIDATE_PYTHON: true
+          VALIDATE_RENOVATE: true
+          VALIDATE_SHELL_SHFMT: true
+          VALIDATE_XML: true
+          VALIDATE_YAML: true

.github/workflows/sync-readme.yaml

@@ -1,3 +1,5 @@
+permissions: {}
+
 on:
   push:
     branches: