Skip to content

Add zizmor to existing precommit GHA workflow#39108

Merged
derrickaw merged 1 commit into
masterfrom
20260625_addZizmorWorkflow
Jun 29, 2026
Merged

Add zizmor to existing precommit GHA workflow#39108
derrickaw merged 1 commit into
masterfrom
20260625_addZizmorWorkflow

Conversation

@derrickaw

@derrickaw derrickaw commented Jun 25, 2026

Copy link
Copy Markdown
Collaborator
  1. https://github.com/apache/beam/actions/runs/28186394984/job/83489302191
  2. [Task]: Remove Zizmor workflow vulnerability findings #39105

Thank you for your contribution! Follow this checklist to help us incorporate your contribution quickly and easily:

  • Mention the appropriate issue in your description (for example: addresses #123), if applicable. This will automatically add a link to the pull request in the issue. If you would like the issue to automatically close on merging the pull request, comment fixes #<ISSUE NUMBER> instead.
  • Update CHANGES.md with noteworthy changes.
  • If this contribution is large, please file an Apache Individual Contributor License Agreement.

See the Contributor Guide for more tips on how to make review process smoother.

To check the build health, please visit https://github.com/apache/beam/blob/master/.test-infra/BUILD_STATUS.md

GitHub Actions Tests Status (on master branch)

Build python source distribution and wheels
Python tests
Java tests
Go tests

See CI.md for more information about GitHub Actions CI or the workflows README to see a list of phrases to trigger workflows.

@github-actions github-actions Bot added the build label Jun 25, 2026
@github-advanced-security

Copy link
Copy Markdown

You are seeing this message because GitHub Code Scanning has recently been set up for this repository, or this pull request contains the workflow file for the Code Scanning tool.

What Enabling Code Scanning Means:

  • The 'Security' tab will display more code scanning analysis results (e.g., for the default branch).
  • Depending on your configuration and choice of analysis tool, future pull requests will be annotated with code scanning analysis results.
  • You will be able to see the analysis results for the pull request's branch on this overview once the scans have completed and the checks have passed.

For more information about GitHub Code Scanning, check out the documentation.

@derrickaw

Copy link
Copy Markdown
Collaborator Author

/gemini review

@gemini-code-assist

Copy link
Copy Markdown
Contributor

Note

Gemini is unable to generate a review for this pull request due to the file types involved not being currently supported.

@derrickaw
derrickaw marked this pull request as ready for review June 25, 2026 18:19
@gemini-code-assist

Copy link
Copy Markdown
Contributor

Note

Gemini is unable to generate a summary for this pull request due to the file types involved not being currently supported.

@github-actions

Copy link
Copy Markdown
Contributor

Assigning reviewers:

R: @liferoad for label build.

Note: If you would like to opt out of this review, comment assign to next reviewer.

Available commands:

  • stop reviewer notifications - opt out of the automated review tooling
  • remind me after tests pass - tag the comment author after tests pass
  • waiting on author - shift the attention set back to the author (any comment or push by the author will return the attention set to the reviewers)

The PR bot will only process comments in the main thread (not review comments).

@derrickaw

Copy link
Copy Markdown
Collaborator Author

assign to next reviewer

@derrickaw
derrickaw requested a review from Abacn June 25, 2026 21:03
@derrickaw
derrickaw merged commit ccac91a into master Jun 29, 2026
12 checks passed
@derrickaw
derrickaw deleted the 20260625_addZizmorWorkflow branch June 29, 2026 14:18
@Abacn

Abacn commented Jul 16, 2026

Copy link
Copy Markdown
Contributor

PreCommit GHA currently failing due to The action zizmorcore/zizmor-action@6599ee8 is not allowed in apache/beam

@derrickaw

Copy link
Copy Markdown
Collaborator Author

Thats sad.

@derrickaw derrickaw mentioned this pull request Jul 16, 2026
3 tasks
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants