chore: workflow success checks#750
Conversation
![github-advanced-security[bot]](https://avatars.githubusercontent.com/in/57789?s=60&v=4){kind=small}
zackpollard
force-pushed
the
chore/workflow-success
branch
7 times, most recently
from
78ffcc2 to
c8cf47b
Compare
| on: | ||
| # This workflow can be triggered manually or on a schedule if desired, | ||
| # but its primary design here is to be triggered by workflow_dispatch | ||
| # or potentially by a push to main if you want to check status after merges. | ||
| workflow_dispatch: # Allows manual triggering | ||
| workflow_run: | ||
| types: | ||
| - completed | ||
| workflows: ["Zizmor", "Terragrunt", "Scripts"] | ||
| push: | ||
| branches: [main] | ||
| # paths: # Consider path filtering if you only want to run this for specific changes | ||
| # - '.github/workflows/**' # Example: run if any workflow changes | ||
| # pull_request: | ||
| # branches: | ||
| # - main |
Check failure
Code scanning / zizmor
workflow_run is almost always used insecurely Error
zackpollard
force-pushed
the
chore/workflow-success
branch
from
c8cf47b to
fa6168b
Compare
zackpollard
force-pushed
the
chore/workflow-success
branch
7 times, most recently
from
a7311bb to
a99ba08
Compare
| with: | ||
| needs: ${{ toJson(needs) }} | ||
| - name: Create Check | ||
| uses: LouisBrunner/checks-action@v2.0.0 |
Check failure
Code scanning / zizmor
action is not pinned to a hash (required by blanket policy) Error
| with: | ||
| needs: ${{ toJson(needs) }} | ||
| - name: Create Check | ||
| uses: LouisBrunner/checks-action@v2.0.0 |
Check failure
Code scanning / zizmor
action is not pinned to a hash (required by blanket policy) Error
| with: | ||
| needs: ${{ toJson(needs) }} | ||
| - name: Create Check | ||
| uses: LouisBrunner/checks-action@v2.0.0 |
Check failure
Code scanning / zizmor
action is not pinned to a hash (required by blanket policy) Error
zackpollard
force-pushed
the
chore/workflow-success
branch
from
a99ba08 to
0b863cb
Compare
|
|
||
| permissions: {} | ||
| permissions: | ||
| checks: write |
Check warning
Code scanning / zizmor
checks: write is overly broad at the workflow level Warning
2 participants
No description provided.