security: pin GitHub Actions to commit SHAs and add audit workflow#830
Closed
rogerkorantenng wants to merge 1 commit into
Closed
security: pin GitHub Actions to commit SHAs and add audit workflow#830rogerkorantenng wants to merge 1 commit into
rogerkorantenng wants to merge 1 commit into
Annotations
1 error, 10 warnings, and 4 notices
|
Run zizmor security audit
Process completed with exit code 13.
|
|
Run zizmor security audit:
ci.yml#L1
ci.yml:1: insufficient job-level concurrency limits: missing concurrency setting
|
|
Run zizmor security audit:
ci.yml#L1
ci.yml:1: insufficient job-level concurrency limits: missing concurrency setting
|
|
Run zizmor security audit:
ci.yml#L116
ci.yml:116: commit hash does not point to a Git tag: this step
|
|
Run zizmor security audit:
ci.yml#L124
ci.yml:124: overly broad permissions: default permissions used due to no permissions: block
|
|
Run zizmor security audit:
ci.yml#L96
ci.yml:96: overly broad permissions: default permissions used due to no permissions: block
|
|
Run zizmor security audit:
ci.yml#L74
ci.yml:74: overly broad permissions: default permissions used due to no permissions: block
|
|
Run zizmor security audit:
ci.yml#L51
ci.yml:51: overly broad permissions: default permissions used due to no permissions: block
|
|
Run zizmor security audit:
ci.yml#L23
ci.yml:23: overly broad permissions: default permissions used due to no permissions: block
|
|
Run zizmor security audit:
ci.yml#L6
ci.yml:6: overly broad permissions: default permissions used due to no permissions: block
|
|
Run zizmor security audit:
ci.yml#L1
ci.yml:1: overly broad permissions: default permissions used due to no permissions: block
|
|
Run zizmor security audit:
pr.yml#L65
pr.yml:65: code injection via template expansion: may expand into attacker-controllable code
|
|
Run zizmor security audit:
pr.yml#L63
pr.yml:63: code injection via template expansion: may expand into attacker-controllable code
|
|
Run zizmor security audit:
ci.yml#L142
ci.yml:142: code injection via template expansion: may expand into attacker-controllable code
|
|
Run zizmor security audit:
ci.yml#L140
ci.yml:140: code injection via template expansion: may expand into attacker-controllable code
|
background
wait
wait-all
cancel
parallel
Loading