New release 1.7.2 #32
Annotations
16 errors and 1 notice
|
Evaluate mandatory checks:
.github/workflows/release.yml#L96
code injection via template expansion: may expand into attacker-controllable code
|
|
Evaluate mandatory checks:
.github/workflows/release.yml#L96
code injection via template expansion: may expand into attacker-controllable code
|
|
Evaluate mandatory checks:
.github/workflows/release.yml#L95
code injection via template expansion: may expand into attacker-controllable code
|
|
Evaluate mandatory checks:
.github/workflows/release.yml#L95
code injection via template expansion: may expand into attacker-controllable code
|
|
Evaluate mandatory checks:
.github/workflows/release.yml#L94
code injection via template expansion: may expand into attacker-controllable code
|
|
Evaluate mandatory checks:
.github/workflows/release.yml#L84
code injection via template expansion: may expand into attacker-controllable code
|
|
Evaluate mandatory checks:
.github/workflows/release.yml#L84
code injection via template expansion: may expand into attacker-controllable code
|
|
Evaluate mandatory checks:
.github/workflows/release.yml#L84
code injection via template expansion: may expand into attacker-controllable code
|
|
Evaluate mandatory checks:
.github/workflows/release.yml#L84
code injection via template expansion: may expand into attacker-controllable code
|
|
Evaluate mandatory checks
Found 17 findings for mandatory checks that must always succeed.
|
|
Re-run zizmor with github format:
.github/workflows/release.yml#L108
release.yml:108: unpinned action reference: action is not pinned to a hash (required by blanket policy)
|
|
Re-run zizmor with github format:
.github/workflows/release.yml#L53
release.yml:53: unpinned action reference: action is not pinned to a hash (required by blanket policy)
|
|
Re-run zizmor with github format:
.github/workflows/release.yml#L46
release.yml:46: unpinned action reference: action is not pinned to a hash (required by blanket policy)
|
|
Re-run zizmor with github format:
.github/workflows/release.yml#L26
release.yml:26: unpinned action reference: action is not pinned to a hash (required by blanket policy)
|
|
Re-run zizmor with github format:
.github/workflows/release.yml#L20
release.yml:20: unpinned action reference: action is not pinned to a hash (required by blanket policy)
|
|
Re-run zizmor with github format:
.github/workflows/release.yml#L17
release.yml:17: unpinned action reference: action is not pinned to a hash (required by blanket policy)
|
|
Re-run zizmor with github format:
.github/workflows/release.yml#L108
release.yml:108: action functionality is already included by the runner: use `gh release` in a script step
|
background
wait
wait-all
cancel
parallel
Loading