Skip to content

Test zizmor scanner findings - #38

Closed
JC0liver wants to merge 1 commit into
devfrom
zizmor-scanner-test
Closed

Test zizmor scanner findings#38
JC0liver wants to merge 1 commit into
devfrom
zizmor-scanner-test

Add temporary zizmor scanner test

42b14a9
Select commit
Loading
Failed to load commit list.
GitHub Advanced Security / zizmor failed Aug 13, 2026 in 7s

7 new alerts including 3 errors

New alerts in code changed by this pull request

  • 3 errors
  • 1 warning
  • 3 notes

See annotations below for details.

View all branch alerts.

Annotations

Check failure on line 7 in .github/workflows/zizmor-test.yml

See this annotation in the file changed.

Code scanning / zizmor

overly broad permissions: contents: write is overly broad at the workflow level Error

overly broad permissions: contents: write is overly broad at the workflow level

Check failure on line 14 in .github/workflows/zizmor-test.yml

See this annotation in the file changed.

Code scanning / zizmor

unpinned action reference: action is not pinned to a hash (required by blanket policy) Error

unpinned action reference: action is not pinned to a hash (required by blanket policy)

Check failure on line 17 in .github/workflows/zizmor-test.yml

See this annotation in the file changed.

Code scanning / zizmor

code injection via template expansion: may expand into attacker-controllable code Error

code injection via template expansion: may expand into attacker-controllable code

Check warning on line 14 in .github/workflows/zizmor-test.yml

See this annotation in the file changed.

Code scanning / zizmor

credential persistence through GitHub Actions artifacts: does not set persist-credentials: false Warning

credential persistence through GitHub Actions artifacts: does not set persist-credentials: false

Check notice on line 4 in .github/workflows/zizmor-test.yml

See this annotation in the file changed.

Code scanning / zizmor

insufficient job-level concurrency limits: workflow is missing concurrency setting Note

insufficient job-level concurrency limits: workflow is missing concurrency setting

Check notice on line 7 in .github/workflows/zizmor-test.yml

See this annotation in the file changed.

Code scanning / zizmor

permissions without explanatory comments: needs an explanatory comment Note

permissions without explanatory comments: needs an explanatory comment

Check notice on line 10 in .github/workflows/zizmor-test.yml

See this annotation in the file changed.

Code scanning / zizmor

workflow or action definition without a name: this job Note

workflow or action definition without a name: this job