Repository navigation
chore: bump zizmorcore/zizmor-action from 0.6.3 to 0.7.1 - #146
Merged
thomson-t merged 1 commit intoOct 21, 2026
Merged
Annotations
4 errors, 10 warnings, and 5 notices
|
Run zizmor
Process completed with exit code 14.
|
|
Run zizmor:
.github/workflows/reusable-workflows.yml#L9
reusable-workflows.yml:9: unpinned action reference: action is not pinned to a hash (required by blanket policy)
|
|
Run zizmor:
.github/workflows/release-publish.yml#L14
release-publish.yml:14: overly broad permissions: id-token: write is overly broad at the workflow level
|
|
Run zizmor:
.github/workflows/release-publish.yml#L13
release-publish.yml:13: overly broad permissions: contents: write is overly broad at the workflow level
|
|
Run zizmor:
.github/workflows/pull-request.yml#L20
pull-request.yml:20: use GitHub's dedicated self-repository syntax: use '$/...' instead of './...'
|
|
Run zizmor:
.github/workflows/pull-request.yml#L16
pull-request.yml:16: use GitHub's dedicated self-repository syntax: use '$/...' instead of './...'
|
|
Run zizmor:
.github/workflows/pull-request.yml#L41
pull-request.yml:41: action's hash pin has mismatched or missing version comment: branch points to commit da0c5fd5d38e
|
|
Run zizmor:
.github/workflows/build-web.yml#L18
build-web.yml:18: credential persistence through GitHub Actions artifacts: does not set persist-credentials: false
|
|
Run zizmor:
.github/workflows/build-ios.yml#L57
build-ios.yml:57: credential persistence through GitHub Actions artifacts: does not set persist-credentials: false
|
|
Run zizmor:
.github/workflows/build-ios.yml#L14
build-ios.yml:14: credential persistence through GitHub Actions artifacts: does not set persist-credentials: false
|
|
Run zizmor:
.github/workflows/build-android.yml#L18
build-android.yml:18: credential persistence through GitHub Actions artifacts: does not set persist-credentials: false
|
|
Run zizmor:
.github/dependabot.yml#L21
dependabot.yml:21: insufficient cooldown in Dependabot updates: insufficient implicit default-days (less than 7)
|
|
Run zizmor:
.github/dependabot.yml#L12
dependabot.yml:12: insufficient cooldown in Dependabot updates: insufficient implicit default-days (less than 7)
|
|
Run zizmor:
.github/dependabot.yml#L3
dependabot.yml:3: insufficient cooldown in Dependabot updates: insufficient implicit default-days (less than 7)
|
|
Run zizmor:
.github/workflows/release-tag.yml#L30
release-tag.yml:30: code injection via template expansion: may expand into attacker-controllable code
|
|
Run zizmor:
.github/workflows/release-tag.yml#L29
release-tag.yml:29: code injection via template expansion: may expand into attacker-controllable code
|
|
Run zizmor:
.github/workflows/release-publish.yml#L59
release-publish.yml:59: action functionality is already included by the runner: use `gh release` in a script step
|
|
Run zizmor:
.github/workflows/release-draft.yml#L53
release-draft.yml:53: code injection via template expansion: may expand into attacker-controllable code
|
|
Run zizmor:
.github/workflows/release-draft.yml#L44
release-draft.yml:44: code injection via template expansion: may expand into attacker-controllable code
|
background
wait
wait-all
cancel
parallel
Loading