Repository: ninnemana/jobfit
Pull request #2: ci(deps): bump peter-evans/create-pull-request from 5 to 7
Author: login: dependabot[bot]
Created: 2025-04-30T21:25:22Z | Merged: 2025-05-01T15:40:32Z

Bumps [peter-evans/create-pull-request](https://github.com/peter-evans/create-pull-request) from 5 to 7.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/peter-evans/create-pull-request/releases">peter-evans/create-pull-request's releases</a>.</em></p>
<blockquote>
<h2>Create Pull Request v7.0.0</h2>
<p>:sparkles: Now supports commit signing with bot-generated tokens! See &quot;What's new&quot; below. :writing_hand::robot:</p>
<h3>Behaviour changes</h3>
<ul>
<li>Action input <code>git-token</code> has been renamed <code>branch-token</code>, to be more clear about its purpose. The <code>branch-token</code> is the token that the action will use to create and update the branch.</li>
<li>The action now handles requests that have been rate-limited by GitHub. Requests hitting a primary rate limit will retry twice, for a total of three attempts. Requests hitting a secondary rate limit will not be retried.</li>
<li>The <code>pull-request-operation</code> output now returns <code>none</code> when no operation was executed.</li>
<li>Removed deprecated output environment variable <code>PULL_REQUEST_NUMBER</code>. Please use the <code>pull-request-number</code> action output instead.</li>
</ul>
<h3>What's new</h3>
<ul>
<li>The action can now sign commits as <code>github-actions[bot]</code> when using <code>GITHUB_TOKEN</code>, or your own bot when using <a href="https://github.com/peter-evans/create-pull-request/blob/HEAD/docs/concepts-guidelines.md#authenticating-with-github-app-generated-tokens">GitHub App tokens</a>. See <a href="https://github.com/peter-evans/create-pull-request/blob/HEAD/docs/concepts-guidelines.md#commit-signature-verification-for-bots">commit signing</a> for details.</li>
<li>Action input <code>draft</code> now accepts a new value <code>always-true</code>. This will set the pull request to draft status when the pull request is updated, as well as on creation.</li>
<li>A new action input <code>maintainer-can-modify</code> indicates whether <a href="https://docs.github.com/en/pull-requests/collaborating-with-pull-requests/working-with-forks/allowing-changes-to-a-pull-request-branch-created-from-a-fork">maintainers can modify</a> the pull request. The default is <code>true</code>, which retains the existing behaviour of the action.</li>
<li>A new output <code>pull-request-commits-verified</code> returns <code>true</code> or <code>false</code>, indicating whether GitHub considers the signature of the branch's commits to be verified.</li>
</ul>
<h2>What's Changed</h2>
<ul>
<li>build(deps-dev): bump <code>@​types/node</code> from 18.19.36 to 18.19.39 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/peter-evans/create-pull-request/pull/3000">peter-evans/create-pull-request#3000</a></li>
<li>build(deps-dev): bump ts-jest from 29.1.5 to 29.2.0 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/peter-evans/create-pull-request/pull/3008">peter-evans/create-pull-request#3008</a></li>
<li>build(deps-dev): bump prettier from 3.3.2 to 3.3.3 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/peter-evans/create-pull-request/pull/3018">peter-evans/create-pull-request#3018</a></li>
<li>build(deps-dev): bump ts-jest from 29.2.0 to 29.2.2 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/peter-evans/create-pull-request/pull/3019">peter-evans/create-pull-request#3019</a></li>
<li>build(deps-dev): bump eslint-plugin-prettier from 5.1.3 to 5.2.1 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/peter-evans/create-pull-request/pull/3035">peter-evans/create-pull-request#3035</a></li>
<li>build(deps-dev): bump <code>@​types/node</code> from 18.19.39 to 18.19.41 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/peter-evans/create-pull-request/pull/3037">peter-evans/create-pull-request#3037</a></li>
<li>build(deps): bump undici from 6.19.2 to 6.19.4 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/peter-evans/create-pull-request/pull/3036">peter-evans/create-pull-request#3036</a></li>
<li>build(deps-dev): bump ts-jest from 29.2.2 to 29.2.3 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/peter-evans/create-pull-request/pull/3038">peter-evans/create-pull-request#3038</a></li>
<li>build(deps-dev): bump <code>@​types/node</code> from 18.19.41 to 18.19.42 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/peter-evans/create-pull-request/pull/3070">peter-evans/create-pull-request#3070</a></li>
<li>build(deps): bump undici from 6.19.4 to 6.19.5 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/peter-evans/create-pull-request/pull/3086">peter-evans/create-pull-request#3086</a></li>
<li>build(deps-dev): bump <code>@​types/node</code> from 18.19.42 to 18.19.43 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/peter-evans/create-pull-request/pull/3087">peter-evans/create-pull-request#3087</a></li>
<li>build(deps-dev): bump ts-jest from 29.2.3 to 29.2.4 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/peter-evans/create-pull-request/pull/3088">peter-evans/create-pull-request#3088</a></li>
<li>build(deps): bump undici from 6.19.5 to 6.19.7 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/peter-evans/create-pull-request/pull/3145">peter-evans/create-pull-request#3145</a></li>
<li>build(deps-dev): bump <code>@​types/node</code> from 18.19.43 to 18.19.44 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/peter-evans/create-pull-request/pull/3144">peter-evans/create-pull-request#3144</a></li>
<li>Update distribution by <a href="https://github.com/actions-bot"><code>@​actions-bot</code></a> in <a href="https://redirect.github.com/peter-evans/create-pull-request/pull/3154">peter-evans/create-pull-request#3154</a></li>
<li>build(deps): bump undici from 6.19.7 to 6.19.8 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/peter-evans/create-pull-request/pull/3213">peter-evans/create-pull-request#3213</a></li>
<li>build(deps-dev): bump <code>@​types/node</code> from 18.19.44 to 18.19.45 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/peter-evans/create-pull-request/pull/3214">peter-evans/create-pull-request#3214</a></li>
<li>Update distribution by <a href="https://github.com/actions-bot"><code>@​actions-bot</code></a> in <a href="https://redirect.github.com/peter-evans/create-pull-request/pull/3221">peter-evans/create-pull-request#3221</a></li>
<li>build(deps-dev): bump eslint-import-resolver-typescript from 3.6.1 to 3.6.3 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/peter-evans/create-pull-request/pull/3255">peter-evans/create-pull-request#3255</a></li>
<li>build(deps-dev): bump <code>@​types/node</code> from 18.19.45 to 18.19.46 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/peter-evans/create-pull-request/pull/3254">peter-evans/create-pull-request#3254</a></li>
<li>build(deps-dev): bump ts-jest from 29.2.4 to 29.2.5 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/peter-evans/create-pull-request/pull/3256">peter-evans/create-pull-request#3256</a></li>
<li>v7 - signed commits by <a href="https://github.com/peter-evans"><code>@​peter-evans</code></a> in <a href="https://redirect.github.com/peter-evans/create-pull-request/pull/3057">peter-evans/create-pull-request#3057</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/rustycl0ck"><code>@​rustycl0ck</code></a> made their first contribution in <a href="https://redirect.github.com/peter-evans/create-pull-request/pull/3057">peter-evans/create-pull-request#3057</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a href="https://github.com/peter-evans/create-pull-request/compare/v6.1.0...v7.0.0">https://github.com/peter-evans/create-pull-request/compare/v6.1.0...v7.0.0</a></p>
<h2>Create Pull Request v6.1.0</h2>
<p>✨ Adds <code>pull-request-branch</code> as an action output.</p>
<h2>What's Changed</h2>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/peter-evans/create-pull-request/commit/271a8d0340265f705b14b6d32b9829c1cb33d45e"><code>271a8d0</code></a> fix: suppress output for some git operations (<a href="https://redirect.github.com/peter-evans/create-pull-request/issues/3776">#3776</a>)</li>
<li><a href="https://github.com/peter-evans/create-pull-request/commit/6f7efd1c24d02e0d947dd3f6f9618019afb36781"><code>6f7efd1</code></a> test: update cpr-example-command</li>
<li><a href="https://github.com/peter-evans/create-pull-request/commit/13c47c574799c8eb0a033eba252619135e70f392"><code>13c47c5</code></a> build(deps-dev): bump prettier from 3.5.1 to 3.5.2 (<a href="https://redirect.github.com/peter-evans/create-pull-request/issues/3754">#3754</a>)</li>
<li><a href="https://github.com/peter-evans/create-pull-request/commit/63e58290d72e889603c931363c5169ba1bbe3fed"><code>63e5829</code></a> build(deps): bump <code>@​octokit/plugin-paginate-rest</code> from 11.4.2 to 11.4.3 (<a href="https://redirect.github.com/peter-evans/create-pull-request/issues/3753">#3753</a>)</li>
<li><a href="https://github.com/peter-evans/create-pull-request/commit/a92c90fcab983421cc9bc736a06daea58c68d0db"><code>a92c90f</code></a> build(deps-dev): bump eslint-import-resolver-typescript (<a href="https://redirect.github.com/peter-evans/create-pull-request/issues/3752">#3752</a>)</li>
<li><a href="https://github.com/peter-evans/create-pull-request/commit/b23b62d48799ec46790610dd74b29cb9ba2eef30"><code>b23b62d</code></a> build(deps-dev): bump ts-jest from 29.2.5 to 29.2.6 (<a href="https://redirect.github.com/peter-evans/create-pull-request/issues/3751">#3751</a>)</li>
<li><a href="https://github.com/peter-evans/create-pull-request/commit/dd2324fc52d5d43c699a5636bcf19fceaa70c284"><code>dd2324f</code></a> fix: use showFileAtRefBase64 to read per-commit file contents (<a href="https://redirect.github.com/peter-evans/create-pull-request/issues/3744">#3744</a>)</li>
<li><a href="https://github.com/peter-evans/create-pull-request/commit/367180cbdfa0448fc1ca9136e4adb020658cf4e5"><code>367180c</code></a> ci: remove testv5 cmd</li>
<li><a href="https://github.com/peter-evans/create-pull-request/commit/25575a12f382fb9c68692ffce1174138b61417d7"><code>25575a1</code></a> build: update distribution (<a href="https://redirect.github.com/peter-evans/create-pull-request/issues/3736">#3736</a>)</li>
<li><a href="https://github.com/peter-evans/create-pull-request/commit/a56e7a56e9186132269996d8937494f12ff51f77"><code>a56e7a5</code></a> build(deps): bump <code>@​octokit/core</code> from 6.1.3 to 6.1.4 (<a href="https://redirect.github.com/peter-evans/create-pull-request/issues/3711">#3711</a>)</li>
<li>Additional commits viewable in <a href="https://github.com/peter-evans/create-pull-request/compare/v5...v7">compare view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=peter-evans/create-pull-request&package-manager=github_actions&previous-version=5&new-version=7)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)


</details>


Diff:
diff --git a/.github/workflows/dependabot-auto-merge.yml b/.github/workflows/dependabot-auto-merge.yml
index 3d9a628..8f6053f 100644
--- a/.github/workflows/dependabot-auto-merge.yml
+++ b/.github/workflows/dependabot-auto-merge.yml
@@ -16,9 +16,9 @@ jobs:
         env:
           PR_URL: ${{github.event.pull_request.html_url}}
           GITHUB_TOKEN: ${{secrets.GITHUB_TOKEN}}
-          
+
       - name: Approve Dependabot PRs
         run: gh pr review --approve "$PR_URL"
         env:
           PR_URL: ${{github.event.pull_request.html_url}}
-          GITHUB_TOKEN: ${{secrets.GITHUB_TOKEN}} 
+          GITHUB_TOKEN: ${{secrets.GITHUB_TOKEN}}
diff --git a/.github/workflows/docker.yml b/.github/workflows/docker.yml
index 5d86f47..64d8c3f 100644
--- a/.github/workflows/docker.yml
+++ b/.github/workflows/docker.yml
@@ -12,8 +12,8 @@ permissions:
   id-token: write
 
 jobs:
-  docker-security:
-    name: Docker Security Scan
+  hadolint:
+    name: Hadolint
     if: github.actor != 'dependabot[bot]'
     runs-on: ubuntu-latest
     steps:
@@ -33,11 +33,22 @@ jobs:
 
       - name: Upload Hadolint scan results to GitHub Security tab
         uses: github/codeql-action/upload-sarif@v3
-        if: success() || failure()
+        if: always()
         with:
           sarif_file: hadolint-results.sarif
           category: hadolint
 
+  trivy:
+    name: Trivy
+    if: github.actor != 'dependabot[bot]'
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v3
+
       - name: Run Trivy vulnerability scanner
         uses: aquasecurity/trivy-action@master
         with:
@@ -49,28 +60,24 @@ jobs:
 
       - name: Upload Trivy scan results to GitHub Security tab
         uses: github/codeql-action/upload-sarif@v3
-        if: success() || failure()
+        if: always()
         with:
           sarif_file: trivy-results.sarif
           category: trivy
 
-      - name: Run Dockle
-        uses: erzz/dockle-action@v1
-        with:
-          image: jobfit:${{ github.sha }}
-          report-format: sarif
-          report-name: dockle-results
-          failure-threshold: FATAL
-        continue-on-error: true
+  dockle:
+    name: Dockle
+    if: github.actor != 'dependabot[bot]'
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
 
-      - name: Upload Dockle scan results to GitHub Security tab
-        uses: github/codeql-action/upload-sarif@v3
-        if: success() || failure()
-        with:
-          sarif_file: dockle-results.sarif
-          category: dockle
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v3
 
       - name: Test Docker build
+        id: build
         uses: docker/build-push-action@v6
         with:
           context: .
@@ -81,23 +88,33 @@ jobs:
           cache-to: type=gha,mode=max
 
       - name: Generate summary
-        if: success() || failure()
+        if: always()
         run: |
           {
-            echo "# Docker Security Scan Results :shield:"
-            echo ""
-            echo "## Hadolint Results"
-            echo "\`\`\`"
-            hadolint "Dockerfile" || true
-            echo "\`\`\`"
+            echo "## Build Results"
+            echo "<details>"
+            echo "<summary>Image ID: ${{ steps.build.outputs.imageid }}</summary>"
             echo ""
-            echo "## Trivy Results"
-            echo "\`\`\`"
-            trivy config "." || true
-            echo "\`\`\`"
+            echo "Digest: ${{ steps.build.outputs.digest }}"
             echo ""
-            echo "## Dockle Results"
-            echo "\`\`\`"
-            cat "dockle-results.sarif" || true
+            echo "\`\`\`json"
+            echo "${{ steps.build.outputs.metadata }}"
             echo "\`\`\`"
+            echo "</details>"
           } >> "$GITHUB_STEP_SUMMARY"
+
+      - name: Run Dockle
+        uses: erzz/dockle-action@v1
+        with:
+          image: jobfit:${{ github.sha }}
+          report-format: sarif
+          report-name: dockle
+          failure-threshold: FATAL
+        continue-on-error: true
+
+      - name: Upload Dockle scan results to GitHub Security tab
+        uses: github/codeql-action/upload-sarif@v3
+        if: always()
+        with:
+          sarif_file: dockle.sarif
+          category: dockle
diff --git a/.github/workflows/go.yml b/.github/workflows/go.yml
index 542589c..90ddf2e 100644
--- a/.github/workflows/go.yml
+++ b/.github/workflows/go.yml
@@ -9,7 +9,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v4
-      
+
       - name: Set up Go
         uses: actions/setup-go@v5
         with:
@@ -27,6 +27,7 @@ jobs:
         with:
           version: v2.1.5
           args: --timeout=5m
+
   test:
     name: Test
     runs-on: ubuntu-latest
@@ -110,4 +111,4 @@ jobs:
             echo "\`\`\`"
             go list -m all
             echo "\`\`\`"
-          } >> "$GITHUB_STEP_SUMMARY" 
+          } >> "$GITHUB_STEP_SUMMARY"
diff --git a/.github/workflows/proto.yml b/.github/workflows/proto.yml
index dd26aea..08f25c8 100644
--- a/.github/workflows/proto.yml
+++ b/.github/workflows/proto.yml
@@ -24,28 +24,34 @@ jobs:
       - name: Run buf lint
         id: buf-lint
         run: |
-          echo "# Protocol Buffer Lint Results :microscope:" >> $GITHUB_STEP_SUMMARY
-          echo "" >> $GITHUB_STEP_SUMMARY
-          echo "## buf lint Output" >> $GITHUB_STEP_SUMMARY
-          echo '```' >> $GITHUB_STEP_SUMMARY
-          buf lint || true
-          echo '```' >> $GITHUB_STEP_SUMMARY
+          {
+            echo "# Protocol Buffer Lint Results :microscope:"
+            echo ""
+            echo "## buf lint Output"
+            echo '```'
+            buf lint || true
+            echo '```'
+          } >> "$GITHUB_STEP_SUMMARY"
 
       - name: Run buf breaking
         id: buf-breaking
         run: |
-          echo "## buf breaking Output" >> $GITHUB_STEP_SUMMARY
-          echo '```' >> $GITHUB_STEP_SUMMARY
-          buf breaking --against ".git#branch=main" || true
-          echo '```' >> $GITHUB_STEP_SUMMARY
+          {
+            echo "## buf breaking Output"
+            echo '```'
+            buf breaking --against ".git#branch=main" || true
+            echo '```'
+          } >> "$GITHUB_STEP_SUMMARY"
 
       - name: Run buf format
         id: buf-format
         run: |
-          echo "## buf format Check" >> $GITHUB_STEP_SUMMARY
-          echo '```' >> $GITHUB_STEP_SUMMARY
-          buf format -d || true
-          echo '```' >> $GITHUB_STEP_SUMMARY
+          {
+            echo "## buf format Check"
+            echo '```'
+            buf format -d || true
+            echo '```'
+          } >> "$GITHUB_STEP_SUMMARY"
 
   generate:
     name: Generate Protocol Buffers
@@ -55,21 +61,28 @@ jobs:
     steps:
       - uses: actions/checkout@v4
 
-      - uses: bufbuild/buf-setup-action@v1
+      - name: Set up Go
+        uses: actions/setup-go@v5
         with:
-          github_token: ${{ github.token }}
+          go-version-file: 'go.mod'
+          cache: true
 
-      - uses: bufbuild/buf-lint-action@v1
-
-      - uses: bufbuild/buf-breaking-action@v1
+      - uses: bufbuild/buf-setup-action@v1
         with:
-          against: '.git#branch=main'
+          github_token: ${{ github.token }}
 
       - name: Generate protos
         run: go generate ./...
 
+      - name: Run buf lint
+        uses: bufbuild/buf-lint-action@v1
+
+      # - uses: bufbuild/buf-breaking-action@v1
+      #   with:
+      #     against: '.git#branch=main'
+
       - name: Create Pull Request
-        uses: peter-evans/create-pull-request@v5
+        uses: peter-evans/create-pull-request@v7
         with:
           commit-message: "chore: update generated protocol buffer code"
           title: "chore: update generated protocol buffer code"
diff --git a/.github/workflows/workflow-lint.yml b/.github/workflows/workflow-lint.yml
index f8f26f4..dc69917 100644
--- a/.github/workflows/workflow-lint.yml
+++ b/.github/workflows/workflow-lint.yml
@@ -17,11 +17,6 @@ jobs:
       - name: Checkout code
         uses: actions/checkout@v4
 
-      - name: Install actionlint
-        run: |
-          bash <(curl https://raw.githubusercontent.com/rhysd/actionlint/main/scripts/download-actionlint.bash)
-          echo "$(pwd)/bin" >> "$GITHUB_PATH"
-
       - name: Initialize summary
         run: |
           {
@@ -31,15 +26,18 @@ jobs:
 
       - name: Run actionlint
         id: actionlint
+        shell: bash
         run: |
           # Create a temporary file for the output
           ACTIONLINT_OUTPUT="$(mktemp)"
-          
+
+          bash <(curl https://raw.githubusercontent.com/rhysd/actionlint/main/scripts/download-actionlint.bash)
+
           # Run actionlint and capture both stdout and stderr
-          if ! actionlint -color -format "{{range \$err := .}}::error file={{\$err.Filepath}},line={{\$err.Line}},col={{\$err.Column}}::{{\$err.Message}}%0A{{end}}" > "$ACTIONLINT_OUTPUT" 2>&1; then
+          if ! ./actionlint -color > "$ACTIONLINT_OUTPUT" 2>&1; then
             echo "ACTIONLINT_FAILED=true" >> "$GITHUB_ENV"
           fi
-          
+
           # Add actionlint results to summary
           {
             echo "## Actionlint Results"
@@ -60,12 +58,12 @@ jobs:
         run: |
           # Create a temporary file for the output
           YAMLLINT_OUTPUT="$(mktemp)"
-          
+
           # Run yamllint and capture the output
           if ! yamllint -f parsable -c ".github/yamllint.yml" .github/workflows/*.yml > "$YAMLLINT_OUTPUT" 2>&1; then
             echo "YAMLLINT_FAILED=true" >> "$GITHUB_ENV"
           fi
-          
+
           # Add yamllint results to summary
           {
             echo ""
@@ -92,12 +90,9 @@ jobs:
         uses: actions/github-script@v7
         with:
           script: |
-            const fs = require('fs');
-            const summary = fs.readFileSync(process.env.GITHUB_STEP_SUMMARY, 'utf8');
-            
             await github.rest.issues.createComment({
               owner: context.repo.owner,
               repo: context.repo.repo,
               issue_number: context.issue.number,
-              body: summary
-            }); 
+              body: process.env.GITHUB_STEP_SUMMARY
+            });
diff --git a/.github/yamllint.yml b/.github/yamllint.yml
index 53c8bc4..07aa980 100644
--- a/.github/yamllint.yml
+++ b/.github/yamllint.yml
@@ -18,4 +18,4 @@ rules:
     max-spaces-inside: 1
   indentation:
     spaces: 2
-    indent-sequences: consistent 
+    indent-sequences: consistent
diff --git a/.golangci.yml b/.golangci.yml
index 004d768..748096c 100644
--- a/.golangci.yml
+++ b/.golangci.yml
@@ -136,4 +136,3 @@ formatters:
       - builtin$
       - examples$
       - api/jobfit/v1/
-
diff --git a/Dockerfile b/Dockerfile
index 02ea2f4..add3173 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -22,13 +22,13 @@ RUN go mod download
 COPY . .
 
 # Generate protobuf code
-RUN buf generate
+RUN go generate ./...
 
 # Build the application
 RUN CGO_ENABLED=0 GOOS=linux GOARCH=amd64 go build -ldflags="-w -s" -o /app/jobfit
 
 # Final stage
-FROM gcr.io/distroless/static-debian12:nonroot@sha256:<specific-sha>
+FROM gcr.io/distroless/static-debian12:38005a5a303edb04eed33167524f55fbdfafe8b9
 
 WORKDIR /app
 
diff --git a/buf.gen.yaml b/buf.gen.yaml
index f817096..efa45b9 100644
--- a/buf.gen.yaml
+++ b/buf.gen.yaml
@@ -1,4 +1,6 @@
 version: v2
+inputs:
+  - directory: .
 managed:
   enabled: true
 plugins:
diff --git a/buf.yaml b/buf.yaml
index ececb7c..b2bd9dd 100644
--- a/buf.yaml
+++ b/buf.yaml
@@ -1,14 +1,14 @@
 version: v2
-name: buf.build/ninnemana/jobfit
+modules:
+  - path: .
 deps:
   - buf.build/googleapis/googleapis
-  # - buf.build/connectrpc/go
 breaking:
   use:
     - FILE
 lint:
   use:
-    - DEFAULT
+    - STANDARD
   except:
     - PACKAGE_VERSION_SUFFIX
-    - SERVICE_SUFFIX 
+    - SERVICE_SUFFIX
diff --git a/generate.sh b/generate.sh
index 02fd359..5d9e797 100755
--- a/generate.sh
+++ b/generate.sh
@@ -19,6 +19,8 @@ if ! command -v protoc-gen-go-grpc >/dev/null 2>&1; then
   go install google.golang.org/grpc/cmd/protoc-gen-go-grpc@latest
 fi
 
+buf dep update
+
 # Run buf generate
 echo "Running buf generate..."
 buf generate 


Reviews:
user: login: github-advanced-security[bot]
state: COMMENTED
author_association: NONE
submitted_at: 2025-05-01T05:50:20Z
user: login: github-advanced-security[bot]
state: COMMENTED
author_association: NONE
submitted_at: 2025-05-01T05:50:22Z

Review comments:
diff_hunk: @@ -28,7 +28,7 @@
 RUN CGO_ENABLED=0 GOOS=linux GOARCH=amd64 go build -ldflags="-w -s" -o /app/jobfit
 
 # Final stage
-FROM gcr.io/distroless/static-debian12:nonroot@sha256:<specific-sha>
+FROM gcr.io/distroless/static-debian12
path: Dockerfile
user: login: github-advanced-security[bot]
body: Always tag the version of an image explicitly

[Show more details](https://github.com/ninnemana/jobfit/security/code-scanning/5)
created_at: 2025-05-01T05:50:20Z
author_association: NONE
diff_hunk: @@ -28,7 +28,7 @@
 RUN CGO_ENABLED=0 GOOS=linux GOARCH=amd64 go build -ldflags="-w -s" -o /app/jobfit
 
 # Final stage
-FROM gcr.io/distroless/static-debian12:nonroot@sha256:<specific-sha>
+FROM gcr.io/distroless/static-debian12
path: Dockerfile
user: login: github-advanced-security[bot]
body: ## ':latest' tag used

Artifact: Dockerfile
Type: dockerfile
Vulnerability DS001
Severity: MEDIUM
Message: Specify a tag in the 'FROM' statement for image 'gcr.io/distroless/static-debian12'
Link: [DS001](https://avd.aquasec.com/misconfig/ds001)

[Show more details](https://github.com/ninnemana/jobfit/security/code-scanning/6)
created_at: 2025-05-01T05:50:22Z
author_association: NONE

PR comments:
user: login: dependabot[bot]
created_at: 2025-04-30T21:25:23Z
body: ### Labels

The following labels could not be found: `dependencies`, `github-actions`. Please create them before Dependabot can add them to a pull request.


Please fix the above issues or remove invalid values from `dependabot.yml`.
author_association: CONTRIBUTOR
user: login: github-actions[bot]
created_at: 2025-05-01T04:39:00Z
body: /home/runner/work/_temp/_runner_file_commands/step_summary_4feffb60-c37e-44d1-93bd-5acf2828796d
author_association: CONTRIBUTOR
user: login: github-advanced-security[bot]
created_at: 2025-05-01T04:39:15Z
body: This pull request sets up GitHub code scanning for this repository. Once the scans have completed and the checks have passed, the analysis results for this pull request branch will appear on [this overview](/ninnemana/jobfit/security/code-scanning?query=pr%3A2+is%3Aopen). Once you merge this pull request, the 'Security' tab will show more code scanning analysis results (for example, for the default branch). Depending on your configuration and choice of analysis tool, future pull requests will be annotated with code scanning analysis results. For more information about GitHub code scanning, check out [the documentation](https://docs.github.com/code-security/code-scanning/introduction-to-code-scanning/about-code-scanning). 
author_association: NONE
user: login: github-actions[bot]
created_at: 2025-05-01T14:13:55Z
body: /home/runner/work/_temp/_runner_file_commands/step_summary_6374b7dc-cfe6-4c76-a1fd-1c877a25ca36
author_association: CONTRIBUTOR