Reviewdog pre-submit fixes (slsa-framework#214)

* fix yamllint config

* Extend default

* ADd test file

* add back comment

* fix config path

* add permissions to reviewdog pre-submit

* set pr-review reporter

* Update reporter

* Fix secret

* use pull_request_target

* Remove test file

* Don't allow PR comments.

.github/workflows/pre-submit.reviewdog.yml

@@ -1,5 +1,10 @@
 name: reviewdog
-on: [pull_request]
+
+"on": [pull_request]
+
+# TODO(github.com/slsa-framework/slsa-github-generator/issues/228): use more restrictive default
+permissions: read-all
+
 jobs:
   golangci-lint:
     runs-on: ubuntu-latest
@@ -37,6 +42,6 @@ jobs:
       - name: yamllint
         uses: reviewdog/action-yamllint@v1
         with:
-          yamllint_flags: "-c .yamllint.config.yaml ."
+          yamllint_flags: "-c .yamllint.yaml ."
           level: warning
           fail_on_error: true

.yamllint.config.yaml → .yamllint.yaml

@@ -1,6 +1,9 @@
 ---
+extends: default
+
 rules:
-  line-length: disable
   comments:
     # prettier formats comments one space from content
     min-spaces-from-content: 1
+  document-start: disable
+  line-length: disable