feat: integrate zizmor #1
trueberrylessAnnotations
4 errors, 10 warnings, and 1 notice
|
Run zizmor 🌈
Process completed with exit code 14.
|
|
unpinned-uses:
packages/knip/fixtures/plugins/github-actions-workspaces/.github/workflows/dir.yml#L10
dir.yml:10: unpinned action reference: action is not pinned to a hash (required by blanket policy)
|
|
unpinned-uses:
packages/knip/fixtures/plugins/github-actions/.github/workflows/working-directory.yml#L30
working-directory.yml:30: unpinned action reference: action is not pinned to a hash (required by blanket policy)
|
|
unpinned-uses:
packages/knip/fixtures/plugins/github-actions/.github/workflows/working-directory.yml#L19
working-directory.yml:19: unpinned action reference: action is not pinned to a hash (required by blanket policy)
|
|
excessive-permissions:
packages/knip/fixtures/plugins/github-actions-workspaces/.github/workflows/dir.yml#L6
dir.yml:6: overly broad permissions: default permissions used due to no permissions: block
|
|
artipacked:
packages/knip/fixtures/plugins/github-actions-workspaces/.github/workflows/dir.yml#L9
dir.yml:9: credential persistence through GitHub Actions artifacts: does not set persist-credentials: false
|
|
excessive-permissions:
packages/knip/fixtures/plugins/github-actions/.github/workflows/working-directory.yml#L26
working-directory.yml:26: overly broad permissions: default permissions used due to no permissions: block
|
|
excessive-permissions:
packages/knip/fixtures/plugins/github-actions/.github/workflows/working-directory.yml#L15
working-directory.yml:15: overly broad permissions: default permissions used due to no permissions: block
|
|
excessive-permissions:
packages/knip/fixtures/plugins/github-actions/.github/workflows/working-directory.yml#L6
working-directory.yml:6: overly broad permissions: default permissions used due to no permissions: block
|
|
excessive-permissions:
packages/knip/fixtures/plugins/github-actions/.github/workflows/working-directory.yml#L1
working-directory.yml:1: overly broad permissions: default permissions used due to no permissions: block
|
|
artipacked:
packages/knip/fixtures/plugins/github-actions/.github/workflows/working-directory.yml#L30
working-directory.yml:30: credential persistence through GitHub Actions artifacts: does not set persist-credentials: false
|
|
artipacked:
packages/knip/fixtures/plugins/github-actions/.github/workflows/working-directory.yml#L19
working-directory.yml:19: credential persistence through GitHub Actions artifacts: does not set persist-credentials: false
|
|
artipacked:
packages/knip/fixtures/plugins/github-actions/.github/workflows/working-directory.yml#L11
working-directory.yml:11: credential persistence through GitHub Actions artifacts: does not set persist-credentials: false
|
|
excessive-permissions:
packages/knip/fixtures/plugin-config/cross-workspace-inputs/.github/workflows/test.yml#L4
test.yml:4: overly broad permissions: default permissions used due to no permissions: block
|
|
template-injection:
packages/knip/fixtures/plugins/github-actions/.github/actions/composite/action.yml#L7
action.yml:7: code injection via template expansion: may expand into attacker-controllable code
|