Skip to content

github: Enable GitHub Actions static analysis with zizmor#1310

Merged
bkeryan merged 6 commits into
mainfrom
users/bkeryan/zizmor
Jun 8, 2026
Merged

github: Enable GitHub Actions static analysis with zizmor#1310
bkeryan merged 6 commits into
mainfrom
users/bkeryan/zizmor

Conversation

@bkeryan

@bkeryan bkeryan commented Jun 6, 2026

Copy link
Copy Markdown
Collaborator

What does this Pull Request accomplish?

Enable static analysis with Zizmor and address all of the errors that it reports.

Disable setup-poetry caching in publish.yml.

Update sync_github_issues_to_azdo.yml to use a case function instead of a shell script.

Why should this Pull Request be merged?

Follow GitHub Actions security best practices.

What testing has been done?

PR build

@bkeryan bkeryan requested review from csjall and dixonjoel as code owners June 6, 2026 00:18
@github-advanced-security

Copy link
Copy Markdown

You are seeing this message because GitHub Code Scanning has recently been set up for this repository, or this pull request contains the workflow file for the Code Scanning tool.

What Enabling Code Scanning Means:

  • The 'Security' tab will display more code scanning analysis results (e.g., for the default branch).
  • Depending on your configuration and choice of analysis tool, future pull requests will be annotated with code scanning analysis results.
  • You will be able to see the analysis results for the pull request's branch on this overview once the scans have completed and the checks have passed.

For more information about GitHub Code Scanning, check out the documentation.

Comment thread .github/workflows/publish.yml
@github-actions

github-actions Bot commented Jun 6, 2026

Copy link
Copy Markdown
Contributor

Test Results

    52 files  ±0      52 suites  ±0   1h 16m 39s ⏱️ + 4m 50s
   689 tests ±0     689 ✅ ±0      0 💤 ±0  0 ❌ ±0 
20 700 runs  ±0  19 644 ✅ ±0  1 056 💤 ±0  0 ❌ ±0 

Results for commit 0f3b323. ± Comparison against base commit d167082.

♻️ This comment has been updated with latest results.

@bkeryan bkeryan force-pushed the users/bkeryan/zizmor branch from 2d50e54 to 0f3b323 Compare June 8, 2026 21:06
@bkeryan bkeryan enabled auto-merge (squash) June 8, 2026 21:07
@bkeryan bkeryan merged commit 16cf9bb into main Jun 8, 2026
28 checks passed
@bkeryan bkeryan deleted the users/bkeryan/zizmor branch June 8, 2026 22:32
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants