 DmitriyLewen
|
e368e32897
|
ci(test): add zizmor security linter for GitHub Actions (#502)
* ci: add zizmor security linter for GitHub Actions
* ci: disable advanced-security for zizmor
* ci: pin all actions to commit hashes
* ci: fix zizmor linter errors in workflows
- Add explicit permissions blocks to all workflows
- Set persist-credentials: false for checkout actions
- Fix template injection by using env variables in run blocks
* fix: address zizmor template injection warnings in action.yaml
- Move inputs to env block to prevent template injection
- Add ignore comment for github-env false positive
* ci: fix remaining zizmor linter errors
- Add permissions and persist-credentials to test.yaml
- Fix ignore comment placement for github-env in action.yaml
|
2026-02-20 15:24:24 -07:00 |
|
|
Nikita Pivkin
|
5eb7ef2605
|
ci: use checks bundle v2 in sync workflow (#505)
* ci: use checks bundle v2 in sync workflow
Signed-off-by: Nikita Pivkin <nikita.pivkin@smartforce.io>
* test: update golden files
Signed-off-by: Nikita Pivkin <nikita.pivkin@smartforce.io>
---------
Signed-off-by: Nikita Pivkin <nikita.pivkin@smartforce.io>
|
2026-02-12 12:37:57 -07:00 |
|
|
Simar
|
f2e28516ef
|
chore(ci): Add oras to correctly setup sync jobs
|
2025-08-26 19:17:21 -06:00 |
|
|
Nikita Pivkin
|
54f21d8382
|
ci: sync trivy-checks version 1 (#398)
Signed-off-by: Nikita Pivkin <nikita.pivkin@smartforce.io>
|
2024-10-07 12:23:44 -06:00 |
|
|
Nikita Pivkin
|
6f8c23760b
|
update tests (#334)
* update tests
* rename trivy images
* rename workflow steps
|
2024-05-06 23:18:53 -06:00 |
|