[zizmor] Security fixes for workflow vulnerabilities + zizmor workflow#105
Open
Vombato wants to merge 5 commits into
Open
[zizmor] Security fixes for workflow vulnerabilities + zizmor workflow#105Vombato wants to merge 5 commits into
Vombato wants to merge 5 commits into
Conversation
Fixes #320 - template-injection in run-e2e-tests.yaml (line 49) - template-injection in run-e2e-tests.yaml (line 49) - template-injection in run-e2e-tests.yaml (line 49) - template-injection in run-e2e-tests.yaml (line 49) - template-injection in run-e2e-tests.yaml (line 49) - unpinned-uses in run-e2e-tests.yaml (line 90) Applied automatic fixes using zizmor.
Vombato
temporarily deployed
to
default-private
GitHub Actions
Inactive
Contributor
|
it might need some adjustments since the aikido pr was touching the same file @Vombato 👍🏼 |
Vombato
temporarily deployed
to
default-private
GitHub Actions
Inactive
Vombato
temporarily deployed
to
default-private
GitHub Actions
Inactive
Vombato
changed the title
Author
|
Sorry for leaving it stale @freemanzMrojo , fixed the conflicts and took the opportunity to also add the workflows scan action. |
Contributor
No worries man! I am not a reviewer of this repo anymore but I am sure @darrenvechain will have a look at it eventually 👍🏼 |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
🔒 Zizmor workflow and security fixes
This PR resolves security vulnerabilities detected by Zizmor and adds its workflow to continuously scan and alert for security issues.