Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Update Scorecard actions versions and apply Zizmor offline findings #3365

Merged
merged 2 commits into from
Jan 11, 2025
Merged

Update Scorecard actions versions and apply Zizmor offline findings #3365

merged 2 commits into from
Jan 11, 2025
+9 −3

Conversation

christophwille
Copy link
Member

https://github.com/woodruffw/zizmor found the following problem across the board (offline mode):

17 |       - uses: actions/checkout@v4
   |  _______-
18 | |       with:
19 | |         submodules: true
   | |________________________- does not set persist-credentials: false

Also fixed are old versions in Scorecard.yml

@christophwille christophwille added Build Automation github_actions Pull requests that update GitHub Actions code labels Jan 11, 2025
@christophwille christophwille changed the title Update Scorecard actions versions and Zizmor offline findings Update Scorecard actions versions and apply Zizmor offline findings Jan 11, 2025
@christophwille christophwille merged commit 3a809d7 into master Jan 11, 2025
9 checks passed
@christophwille christophwille deleted the fix/ghactions branch January 11, 2025 10:37
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
Build Automation github_actions Pull requests that update GitHub Actions code
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
1 participant
@christophwille