Harden GitHub workflows #7
samdarkzizmor.yml
on: pull_request
zizmor
/
Run zizmor 🌈
7s
Annotations
1 error, 10 warnings, and 2 notices
|
zizmor / Run zizmor 🌈
Process completed with exit code 13.
|
|
concurrency-limits:
.github/workflows/composer-dependency-analyzer.yml#L1
composer-dependency-analyzer.yml:1: insufficient job-level concurrency limits: workflow is missing concurrency setting
|
|
ref-version-mismatch:
.github/workflows/composer-dependency-analyzer.yml#L58
composer-dependency-analyzer.yml:58: action's hash pin has mismatched or missing version comment: missing version comment
|
|
ref-version-mismatch:
.github/workflows/composer-dependency-analyzer.yml#L46
composer-dependency-analyzer.yml:46: action's hash pin has mismatched or missing version comment: missing version comment
|
|
stale-action-refs:
.github/workflows/composer-dependency-analyzer.yml#L51
composer-dependency-analyzer.yml:51: commit hash does not point to a Git tag: this step
|
|
concurrency-limits:
.github/workflows/build.yml#L1
build.yml:1: insufficient job-level concurrency limits: workflow is missing concurrency setting
|
|
ref-version-mismatch:
.github/workflows/build.yml#L80
build.yml:80: action's hash pin has mismatched or missing version comment: missing version comment
|
|
ref-version-mismatch:
.github/workflows/build.yml#L64
build.yml:64: action's hash pin has mismatched or missing version comment: missing version comment
|
|
ref-version-mismatch:
.github/workflows/build.yml#L51
build.yml:51: action's hash pin has mismatched or missing version comment: missing version comment
|
|
stale-action-refs:
.github/workflows/build.yml#L56
build.yml:56: commit hash does not point to a Git tag: this step
|
|
dependabot-cooldown:
.github/dependabot.yml#L14
dependabot.yml:14: insufficient cooldown in Dependabot updates: missing cooldown configuration
|
|
superfluous-actions:
.github/workflows/cs.yml#L49
cs.yml:49: action functionality is already included by the runner: use `git add`, `git commit`, and `git push` in a script step
|
|
anonymous-definition:
.github/workflows/cs.yml#L17
cs.yml:17: workflow or action definition without a name: this job
|