Skip to content

Commit f51693c

Browse files
committed
use zizmor config
1 parent 059d280 commit f51693c

3 files changed

Lines changed: 5 additions & 10 deletions

File tree

.github/workflows/docker.yaml

Lines changed: 0 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -80,8 +80,6 @@ jobs:
8080
VERSION: ${{ (github.ref_type == 'tag' && github.ref_name) || steps.check.outputs.ref || 'dev' }}
8181
PHP_VERSION: ${{ steps.check.outputs.php_version }}
8282
build:
83-
# TODO: re-enable the environment when the GitHub UI supports grouping or masking environment notifications (they pollute pull requests right now)
84-
#environment: dockerhub
8583
runs-on: ${{ startsWith(matrix.platform, 'linux/arm') && 'ubuntu-24.04-arm' || 'ubuntu-24.04' }}
8684
needs:
8785
- prepare
@@ -206,8 +204,6 @@ jobs:
206204

207205
# Adapted from https://docs.docker.com/build/ci/github-actions/multi-platform/
208206
push:
209-
# TODO: re-enable the environment when the GitHub UI supports grouping or masking environment notifications (they pollute pull requests right now)
210-
#environment: dockerhub
211207
runs-on: ubuntu-24.04
212208
needs:
213209
- prepare

.github/workflows/static.yaml

Lines changed: 0 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -84,8 +84,6 @@ jobs:
8484
VERSION: ${{ steps.check.outputs.ref || 'dev' }}
8585

8686
build-linux-musl:
87-
# TODO: re-enable the environment when the GitHub UI supports grouping or masking environment notifications (they pollute Pull Requests right now)
88-
#environment: dockerhub
8987
permissions:
9088
contents: write
9189
id-token: write
@@ -221,8 +219,6 @@ jobs:
221219
BINARY: ./frankenphp-linux-${{ matrix.platform == 'linux/amd64' && 'x86_64' || 'aarch64' }}${{ matrix.debug && '-debug' || '' }}${{ matrix.mimalloc && '-mimalloc' || '' }}
222220

223221
build-linux-gnu:
224-
# TODO: re-enable the environment when the GitHub UI supports grouping or masking environment notifications, because they pollute pull requests right now
225-
#environment: dockerhub
226222
permissions:
227223
contents: write
228224
id-token: write
@@ -381,8 +377,6 @@ jobs:
381377

382378
# Adapted from https://docs.docker.com/build/ci/github-actions/multi-platform/
383379
push:
384-
# TODO: re-enable the environment when the GitHub UI supports grouping or masking environment notifications (they pollute pull requests right now)
385-
#environment: dockerhub
386380
runs-on: ubuntu-24.04
387381
needs:
388382
- prepare

zizmor.yaml

Lines changed: 5 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -4,3 +4,8 @@ rules:
44
config:
55
policies:
66
"*": ref-pin
7+
secrets-outside-env:
8+
config:
9+
allow:
10+
# TODO: re-enable the environment when the GitHub UI supports grouping or masking environment notifications (they pollute pull requests right now)
11+
- DOCKERHUB_TOKEN

0 commit comments

Comments
 (0)