Repository navigation
Harden GitHub workflows #6
samdarkzizmor.yml
on: pull_request
zizmor
/
Run zizmor 🌈
8s
Annotations
3 errors and 5 warnings
|
zizmor / Run zizmor 🌈
Process completed with exit code 14.
|
|
excessive-permissions:
.github/workflows/rector-cs.yml#L14
rector-cs.yml:14: overly broad permissions: contents: write is overly broad at the workflow level
|
|
unpinned-images:
.github/workflows/mutation.yml#L44
mutation.yml:44: unpinned image references: container image is not pinned to a SHA256 hash
|
|
undocumented-permissions:
.github/workflows/zizmor.yml#L17
zizmor.yml:17: permissions without explanatory comments: needs an explanatory comment
|
|
undocumented-permissions:
.github/workflows/rector-cs.yml#L14
rector-cs.yml:14: permissions without explanatory comments: needs an explanatory comment
|
|
ref-version-mismatch:
.github/workflows/mutation.yml#L68
mutation.yml:68: action's hash pin has mismatched or missing version comment: missing version comment
|
|
ref-version-mismatch:
.github/workflows/mutation.yml#L55
mutation.yml:55: action's hash pin has mismatched or missing version comment: missing version comment
|
|
stale-action-refs:
.github/workflows/mutation.yml#L60
mutation.yml:60: commit hash does not point to a Git tag: this step
|