chore: more zizmor fixes

Author: drstrangelooker

.github/workflows/codegen-ci.yml

@@ -70,10 +70,12 @@ jobs:
         # TODO: can we cache some layers of the image for faster download?
         # we probably don't want to cache the final image for IP security...
         run: |
-          docker pull --quiet us-west1-docker.pkg.dev/cloud-looker-sdk-codegen-cicd/looker/${{ fromJson(vars.PRIMARY_LOOKER_VERSION)[0] }}
+          docker pull --quiet us-west1-docker.pkg.dev/cloud-looker-sdk-codegen-cicd/looker/${PRIMARY_LOOKER_VERSION}
           # set $LOOKER_OPTS to --no-ssl if we want to turn off ssl
-          docker run --name looker-sdk-codegen-ci -d -p 10000:9999 -p 20000:19999 us-west1-docker.pkg.dev/cloud-looker-sdk-codegen-cicd/looker/${{ fromJson(vars.PRIMARY_LOOKER_VERSION)[0] }}
+          docker run --name looker-sdk-codegen-ci -d -p 10000:9999 -p 20000:19999 us-west1-docker.pkg.dev/cloud-looker-sdk-codegen-cicd/looker/${PRIMARY_LOOKER_VERSION}
           docker logs -f looker-sdk-codegen-ci --until=30s &
+        env:
+          PRIMARY_LOOKER_VERSION: ${{ fromJson(vars.PRIMARY_LOOKER_VERSION)[0] }}
 
       - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4
         with:

.github/workflows/lerna-publish.yml

@@ -46,9 +46,11 @@ jobs:
 
       - name: Pull and run Looker docker image
         run: |
-          docker pull --quiet us-west1-docker.pkg.dev/cloud-looker-sdk-codegen-cicd/looker/${{ fromJson(vars.PRIMARY_LOOKER_VERSION)[0] }}
-          docker run --name looker-sdk-codegen-ci -d -p 10000:9999 -p 20000:19999 us-west1-docker.pkg.dev/cloud-looker-sdk-codegen-cicd/looker/${{ fromJson(vars.PRIMARY_LOOKER_VERSION)[0] }}
+          docker pull --quiet us-west1-docker.pkg.dev/cloud-looker-sdk-codegen-cicd/looker/${PRIMARY_LOOKER_VERSION}
+          docker run --name looker-sdk-codegen-ci -d -p 10000:9999 -p 20000:19999 us-west1-docker.pkg.dev/cloud-looker-sdk-codegen-cicd/looker/${PRIMARY_LOOKER_VERSION}
           docker logs -f looker-sdk-codegen-ci --until=30s &
+        env:
+          PRIMARY_LOOKER_VERSION: ${{ fromJson(vars.PRIMARY_LOOKER_VERSION)[0] }}
 
       - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4
         with:

.github/workflows/python-publish.yml

@@ -37,7 +37,7 @@ jobs:
           pip install wheel
           python setup.py sdist bdist_wheel
 
-      - uses: pypa/gh-action-pypi-publish@54b39fb9371c0b3a6f9f14bb8a67394defc7a806 # v1.4.1
+      - uses: pypa/gh-action-pypi-publish@ed0c53931b1dc9bd32cbe73a98c7f6766f8a527e # v1.13.0
         with:
           user: __token__
           password: ${{ secrets.PYPI_API_TOKEN }}

.github/workflows/required-checks-hack-ci.yml

@@ -92,7 +92,7 @@ jobs:
 
       - name: Debug info
         run: |
-          echo "${{ toJSON(steps.filter.outputs) }}"
+          echo "${STEPS_FILTER_OUTPUTS}"
           echo "apix: ${STEPS_FILTER_OUTPUTS_APIX}"
           echo "codegen: ${STEPS_FILTER_OUTPUTS_CODEGEN}"
           echo "hackathon: ${STEPS_FILTER_OUTPUTS_HACKATHON}"
@@ -101,6 +101,7 @@ jobs:
           echo "tssdk: ${STEPS_FILTER_OUTPUTS_TSSDK}"
           echo "gosdk: ${STEPS_FILTER_OUTPUTS_GOSDK}"
         env:
+          STEPS_FILTER_OUTPUTS: ${{ toJSON(steps.filter.outputs) }}
           STEPS_FILTER_OUTPUTS_APIX: ${{ steps.filter.outputs.apix }}
           STEPS_FILTER_OUTPUTS_CODEGEN: ${{ steps.filter.outputs.codegen }}
           STEPS_FILTER_OUTPUTS_HACKATHON: ${{ steps.filter.outputs.hackathon }}

.github/workflows/tssdk-ci.yml

@@ -156,10 +156,12 @@ jobs:
         # TODO: can we cache some layers of the image for faster download?
         # we probably don't want to cache the final image for IP security...
         run: |
-          docker pull --quiet us-west1-docker.pkg.dev/cloud-looker-sdk-codegen-cicd/looker/${{ matrix.looker }}
+          docker pull --quiet us-west1-docker.pkg.dev/cloud-looker-sdk-codegen-cicd/looker/${MATRIX_LOOKER}
           # set $LOOKER_OPTS to --no-ssl if we want to turn off ssl
-          docker run --name looker-sdk-codegen-ci -d -p 10000:9999 -p 20000:19999 us-west1-docker.pkg.dev/cloud-looker-sdk-codegen-cicd/looker/${{ matrix.looker }}
+          docker run --name looker-sdk-codegen-ci -d -p 10000:9999 -p 20000:19999 us-west1-docker.pkg.dev/cloud-looker-sdk-codegen-cicd/looker/${MATRIX_LOOKER}
           docker logs -f looker-sdk-codegen-ci --until=30s &
+        env:
+          MATRIX_LOOKER: ${{ matrix.looker }}
 
       - name: Install Node ${{ matrix.node-version }}
         uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4