Merge pull request #1516 from crazy-max/fix-zizmor
Some checks are pending
ci / export-docker (push) Waiting to run
ci / secret-envs (push) Waiting to run
ci / network (push) Waiting to run
ci / named-context-pin (push) Waiting to run
ci / checks (latest) (push) Waiting to run
ci / shm-size (push) Waiting to run
ci / ulimit (push) Waiting to run
ci / add-hosts (push) Waiting to run
ci / attests-compat (moby/buildkit:buildx-stable-1, latest) (push) Waiting to run
ci / attests-compat (moby/buildkit:buildx-stable-1, v0.9.1) (push) Waiting to run
ci / attests-compat (moby/buildkit:latest, edge) (push) Waiting to run
ci / sbom (/tmp/buildx-build, binary) (push) Waiting to run
ci / multi (multi) (push) Waiting to run
ci / digest (docker, true, false) (push) Waiting to run
ci / annotations (push) Waiting to run
ci / provenance (, /tmp/buildx-build, binary) (push) Waiting to run
e2e / build (ghcr, GitHub, ghcr.io, ghcr.io/docker-ghactiontest/test, remote) (push) Waiting to run
validate / prepare (push) Waiting to run
ci / provenance (mode=max, /tmp/buildx-build, binary) (push) Waiting to run
ci / local-cache (push) Waiting to run
ci / named-context-docker (push) Waiting to run
ci / named-context-container (push) Waiting to run
ci / provenance (mode=max, type=image,name=localhost:5000/name/app:latest,push=true, image) (push) Waiting to run
ci / multi-output (push) Waiting to run
e2e / build (gitlab, GitLab, registry.gitlab.com, registry.gitlab.com/test1716/test, remote) (push) Waiting to run
e2e / build (none, harbor, Harbor, local) (push) Waiting to run
ci / digest (docker, false, false) (push) Waiting to run
ci / digest (docker, false, true) (push) Waiting to run
ci / digest (docker-container, false, false) (push) Waiting to run
ci / digest (docker-container, false, true) (push) Waiting to run
ci / record-retention-days (2) (push) Waiting to run
ci / digest (docker-container, true, false) (push) Waiting to run
ci / registry-cache (push) Waiting to run
zizmor / zizmor (push) Waiting to run
ci / github-cache (push) Waiting to run
ci / docker-config-malformed (push) Waiting to run
ci / load-and-push (push) Waiting to run
ci / summary-disable (push) Waiting to run
ci / summary-not-supported (push) Waiting to run
e2e / build (quay, Quay, quay.io, quay.io/docker_build_team/ghactiontest, remote) (push) Waiting to run
ci / record-upload-disable (push) Waiting to run
e2e / build (acr, Azure Container Registry, officialgithubactions.azurecr.io, officialgithubactions.azurecr.io/test-docker-action, remote) (push) Waiting to run
ci / no-default-attestations (push) Waiting to run
validate / validate (push) Blocked by required conditions
codeql / analyze (push) Waiting to run
e2e / build (artifactory, Artifactory, infradock.jfrog.io, infradock.jfrog.io/test-ghaction/build-push-action, remote) (push) Waiting to run
e2e / build (aws, AWS ECR Public, public.ecr.aws, public.ecr.aws/q3b5f1u4/test-docker-action, remote) (push) Waiting to run
e2e / build (dockerhub, Docker Hub, , ghactionstest/ghactionstest, remote) (push) Waiting to run
e2e / build (aws, AWS ECR, 175142243308.dkr.ecr.us-east-2.amazonaws.com, 175142243308.dkr.ecr.us-east-2.amazonaws.com/sandbox/test-docker-action, remote) (push) Waiting to run
e2e / build (gar, Google Artifact Registry, us-east4-docker.pkg.dev, us-east4-docker.pkg.dev/sandbox-298914/docker-official-github-actions/test-docker-action, remote) (push) Waiting to run
test / test (push) Waiting to run
e2e / build (none, distribution, Distribution, local) (push) Waiting to run
e2e / build (none, nexus, Nexus, local) (push) Waiting to run
ci / minimal (push) Waiting to run
ci / secret (push) Waiting to run
ci / proxy-buildkitd (push) Waiting to run
ci / record-retention-days (0) (push) Waiting to run
ci / annotations-disabled (push) Waiting to run
ci / git-context (push) Waiting to run
ci / path-context (push) Waiting to run
ci / secret-files (push) Waiting to run
ci / cgroup-parent (push) Waiting to run
ci / git-context-query (push) Waiting to run
ci / checks (edge) (push) Waiting to run
ci / git-context-secret (push) Waiting to run
ci / no-cache-filters (push) Waiting to run
ci / attests-compat (moby/buildkit:v0.10.6, latest) (push) Waiting to run
ci / provenance (, type=image,name=localhost:5000/name/app:latest,push=true, image) (push) Waiting to run
ci / example (push) Waiting to run
ci / error (push) Waiting to run
ci / sbom (type=image,name=localhost:5000/name/app:latest,push=true, image) (push) Waiting to run
ci / multi (multi-sudo) (push) Waiting to run
ci / standalone (push) Waiting to run
ci / proxy-docker-config (push) Waiting to run
ci / checks (v0.14.1) (push) Waiting to run
ci / call-check (push) Waiting to run
ci / error-buildx (push) Waiting to run
ci / docker-driver (push) Waiting to run

ci(zizmor): update rules
This commit is contained in:
Tõnis Tiigi 2026-04-15 14:25:13 -07:00 committed by GitHub
commit c269a24fa2
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
2 changed files with 2 additions and 3 deletions

View file

@ -19,6 +19,8 @@ updates:
interval: "daily"
cooldown:
default-days: 2
exclude:
- "@docker/actions-toolkit"
versioning-strategy: "increase"
allow:
- dependency-type: "production"

3
.github/zizmor.yml vendored
View file

@ -1,3 +0,0 @@
rules:
secrets-outside-env: # FIXME: remove this rule when zizmor 1.24.0 is released, fixing the right persona attached to this rule: https://github.com/zizmorcore/zizmor/pull/1783
disable: true