Skip to content

chore(ci): Fix zizmor security findings in workflows #38

chore(ci): Fix zizmor security findings in workflows

chore(ci): Fix zizmor security findings in workflows #38

Triggered via pull request July 9, 2026 16:35
@morganchen12morganchen12
synchronize #956
Status Failure
Total duration 38s
Artifacts 2

github_actions_scan.yml Required

on: pull_request_target
check-changes
4s
check-changes
zizmor-config
7s
zizmor-config
zizmor-scan
11s
zizmor-scan
zizmor-output
7s
zizmor-output
zizmor-upload
6s
zizmor-upload
Fit to window
Zoom out
Zoom in

Annotations

1 error and 4 warnings
zizmor-output
Process completed with exit code 1.
zizmor-config
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: google-github-actions/auth@c200f3691d83b41bf9bbd8638997a462592937ed. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
zizmor-upload
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: google-github-actions/auth@c200f3691d83b41bf9bbd8638997a462592937ed. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
ref-version-mismatch: .github/workflows/ci.yml#L46
ci.yml:46: action's hash pin has mismatched or missing version comment: points to unknown ref
ref-version-mismatch: .github/workflows/ci.yml#L42
ci.yml:42: action's hash pin has mismatched or missing version comment: points to unknown ref

Artifacts

Produced during runtime
Name Size Digest
zizmor Expired
1.67 KB
sha256:7ba4b35aa2f3d1933912d926009bd40eb1c5ba7b08928c15605ae20b451b91a1
zizmor-config Expired
295 Bytes
sha256:cd786e24b8690b6b563e3720600643393b5e68634989dcdb29071f2e0506b951