Merge pull request #264 from crazy-max/zizmor-fixes
Some checks failed
ci / main (ubuntu-24.04-arm, type=image,tag=27.3.1) (push) Has been cancelled
ci / main (ubuntu-24.04-arm, v27.3.1) (push) Has been cancelled
ci / main (ubuntu-latest, type=image,tag=27.3.1) (push) Has been cancelled
ci / main (macos-26-large, type=image,tag=27.3.1) (push) Has been cancelled
validate / prepare (push) Has been cancelled
ci / set-host (push) Has been cancelled
ci / rootless (push) Has been cancelled
ci / tcp (macos-26-large) (push) Has been cancelled
ci / tcp (ubuntu-latest) (push) Has been cancelled
ci / tcp (windows-latest) (push) Has been cancelled
ci / undock-regctl-version (, v0.9.0) (push) Has been cancelled
ci / undock-regctl-version (v0.8.2, ) (push) Has been cancelled
ci / undock-regctl-version (v0.8.2, v0.9.0) (push) Has been cancelled
ci / main (ubuntu-latest, ) (push) Has been cancelled
ci / docker-29 (macos-26-large) (push) Has been cancelled
ci / main (macos-26-large, ) (push) Has been cancelled
ci / docker-29 (ubuntu-latest) (push) Has been cancelled
ci / docker-29 (windows-latest) (push) Has been cancelled
ci / main (macos-26-large, v27.3.1) (push) Has been cancelled
test / test (push) Has been cancelled
zizmor / zizmor (push) Has been cancelled
ci / main (ubuntu-24.04-arm, ) (push) Has been cancelled
ci / main (ubuntu-latest, v27.3.1) (push) Has been cancelled
ci / main (windows-latest, ) (push) Has been cancelled
ci / main (windows-latest, type=image,tag=27.3.1) (push) Has been cancelled
ci / main (windows-latest, v27.3.1) (push) Has been cancelled
ci / channel (macos-26-large) (push) Has been cancelled
ci / channel (ubuntu-24.04-arm) (push) Has been cancelled
ci / channel (ubuntu-latest) (push) Has been cancelled
ci / channel (windows-latest) (push) Has been cancelled
ci / daemon-config (macos-26-large) (push) Has been cancelled
ci / daemon-config (ubuntu-24.04-arm) (push) Has been cancelled
ci / daemon-config (ubuntu-latest) (push) Has been cancelled
ci / daemon-config (windows-latest) (push) Has been cancelled
ci / context (macos-26-large) (push) Has been cancelled
ci / context (ubuntu-24.04-arm) (push) Has been cancelled
ci / context (ubuntu-latest) (push) Has been cancelled
ci / context (windows-latest) (push) Has been cancelled
ci / lima-start-args (push) Has been cancelled
ci / build-linux (containerd-system) (push) Has been cancelled
ci / build-linux (containerd-tarball) (push) Has been cancelled
ci / tcp (ubuntu-24.04-arm) (push) Has been cancelled
ci / build-macos (macos-26-large) (push) Has been cancelled
validate / validate (push) Has been cancelled
ci / build-windows (push) Has been cancelled
ci / undock-regctl-version (, ) (push) Has been cancelled
codeql / analyze (push) Has been cancelled

ci: restrict update-dist GitHub App token scope
This commit is contained in:
CrazyMax 2026-05-21 14:58:38 +02:00 committed by GitHub
commit 328f2e0797
No known key found for this signature in database
GPG key ID: B5690EEEBB952194

View file

@ -26,6 +26,8 @@ jobs:
app-id: ${{ secrets.GHACTIONS_REPO_WRITE_APP_ID }} app-id: ${{ secrets.GHACTIONS_REPO_WRITE_APP_ID }}
private-key: ${{ secrets.GHACTIONS_REPO_WRITE_APP_PRIVATE_KEY }} private-key: ${{ secrets.GHACTIONS_REPO_WRITE_APP_PRIVATE_KEY }}
owner: docker owner: docker
repositories: setup-docker-action
permission-contents: write
- -
name: Checkout name: Checkout
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2