chore: restore nightly protobuf compatibility check #2669
whowesgithub_actions_scan.yml Required
on: pull_request_target
Annotations
4 errors and 12 warnings
|
zizmor-output
Process completed with exit code 1.
|
|
zizmor/template-injection:
.github/workflows/update_librarian_googleapis.yaml#L80
code injection via template expansion: may expand into attacker-controllable code
|
|
zizmor/unpinned-uses:
.github/workflows/librarian_generation_check.yaml#L110
unpinned action reference: action is not pinned to a hash (required by blanket policy)
|
|
zizmor-output
Found 2 findings for mandatory checks that must always succeed.
|
|
zizmor-config
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: google-github-actions/auth@c200f3691d83b41bf9bbd8638997a462592937ed. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
zizmor-upload
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: google-github-actions/auth@c200f3691d83b41bf9bbd8638997a462592937ed. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
ref-version-mismatch:
.github/workflows/ci.yaml#L277
ci.yaml:277: action's hash pin has mismatched or missing version comment: points to commit 11d5960a3267
|
|
ref-version-mismatch:
.github/workflows/ci.yaml#L147
ci.yaml:147: action's hash pin has mismatched or missing version comment: points to commit d23441a48e51
|
|
ref-version-mismatch:
.github/workflows/ci.yaml#L119
ci.yaml:119: action's hash pin has mismatched or missing version comment: points to commit cf277c60eb25
|
|
ref-version-mismatch:
.github/workflows/ci.yaml#L108
ci.yaml:108: action's hash pin has mismatched or missing version comment: points to commit cf277c60eb25
|
|
ref-version-mismatch:
.github/workflows/ci.yaml#L104
ci.yaml:104: action's hash pin has mismatched or missing version comment: points to commit 11d5960a3267
|
|
ref-version-mismatch:
.github/workflows/ci.yaml#L77
ci.yaml:77: action's hash pin has mismatched or missing version comment: points to commit cf277c60eb25
|
|
ref-version-mismatch:
.github/workflows/ci.yaml#L73
ci.yaml:73: action's hash pin has mismatched or missing version comment: points to commit 11d5960a3267
|
|
ref-version-mismatch:
.github/workflows/ci.yaml#L38
ci.yaml:38: action's hash pin has mismatched or missing version comment: points to commit d23441a48e51
|
|
ref-version-mismatch:
.github/workflows/changelog_generation_test.yaml#L17
changelog_generation_test.yaml:17: action's hash pin has mismatched or missing version comment: points to commit a37ce9120846
|
|
ref-version-mismatch:
.github/workflows/changelog_generation.yaml#L29
changelog_generation.yaml:29: action's hash pin has mismatched or missing version comment: points to commit a37ce9120846
|
Artifacts
Produced during runtime
| Name | Size | Digest | |
|---|---|---|---|
|
zizmor
|
47.4 KB |
sha256:95af4c3dcf2284cb933f27a53e4a5cb919b4c5df783b18c873b13dddfff51866
|
|
|
zizmor-config
|
342 Bytes |
sha256:a2a6c389ff713334eb3d5fe9dbed9e43efb608106f7082cd325337cf4035047a
|
|