Skip to content

chore(ci): fix CI pipeline security issues reported by zizmor#34

Merged
janhoy merged 1 commit into
apache:mainfrom
DhavalGojiya:security/zizmor
May 19, 2026
Merged

chore(ci): fix CI pipeline security issues reported by zizmor#34
janhoy merged 1 commit into
apache:mainfrom
DhavalGojiya:security/zizmor

Conversation

@DhavalGojiya
Copy link
Copy Markdown
Contributor

@DhavalGojiya DhavalGojiya commented May 18, 2026

Description

Fixes CI pipeline security issues reported by zizmor

% zizmor .

  • set persist-credentials: false everywhere
  • use full hashes instead of @v1/v2/v3 etc.
  • Update permissions scope

@janhoy janhoy merged commit 385be3d into apache:main May 19, 2026
@janhoy
Copy link
Copy Markdown
Contributor

janhoy commented May 19, 2026

Thanks!

@DhavalGojiya DhavalGojiya deleted the security/zizmor branch May 19, 2026 12:25
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants