Skip to content

Conversation

@github-actions
Copy link
Contributor

@github-actions github-actions bot commented Jun 1, 2025

This is an auto-generated PR

It updates all the examples based on the latest version of create-plugin.

@github-actions github-actions bot requested review from a team as code owners June 1, 2025 00:29
@github-actions github-actions bot requested review from andresmgot, oshirohugo and s4kh and removed request for a team June 1, 2025 00:29
@tolzhabayev tolzhabayev closed this Jun 2, 2025
@github-project-automation github-project-automation bot moved this from 📬 Triage to 🚀 Shipped in Plugins Platform / Grafana Community Jun 2, 2025
@tolzhabayev tolzhabayev reopened this Jun 2, 2025
@github-project-automation github-project-automation bot moved this from 🚀 Shipped to 💡 Ideation in Plugins Platform / Grafana Community Jun 2, 2025
@github-actions
Copy link
Contributor Author

github-actions bot commented Jun 2, 2025

😢 zizmor failed with exit code 14.

Expand for full output
error[excessive-permissions]: overly broad permissions
  --> ./examples/app-basic/.github/workflows/ci.yml:14:3
   |
14 |   contents: write
   |   ^^^^^^^^^^^^^^^ contents: write is overly broad at the workflow level
   |
   = note: audit confidence → High

error[excessive-permissions]: overly broad permissions
  --> ./examples/app-basic/.github/workflows/ci.yml:15:3
   |
15 |   id-token: write
   |   ^^^^^^^^^^^^^^^ id-token: write is overly broad at the workflow level
   |
   = note: audit confidence → High

error[excessive-permissions]: overly broad permissions
  --> ./examples/app-basic/.github/workflows/ci.yml:16:3
   |
16 |   pull-requests: write
   |   ^^^^^^^^^^^^^^^^^^^^ pull-requests: write is overly broad at the workflow level
   |
   = note: audit confidence → High

error[unpinned-uses]: unpinned action reference
  --> ./examples/app-basic/.github/workflows/ci.yml:65:9
   |
65 |         uses: magefile/mage-action@v3
   |         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ action is not pinned to a hash (required by blanket policy)
   |
   = note: audit confidence → High

error[unpinned-uses]: unpinned action reference
  --> ./examples/app-basic/.github/workflows/ci.yml:72:9
   |
72 |         uses: magefile/mage-action@v3
   |         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ action is not pinned to a hash (required by blanket policy)
   |
   = note: audit confidence → High

error[excessive-permissions]: overly broad permissions
  --> ./examples/app-with-backend/.github/workflows/ci.yml:14:3
   |
14 |   contents: write
   |   ^^^^^^^^^^^^^^^ contents: write is overly broad at the workflow level
   |
   = note: audit confidence → High

error[excessive-permissions]: overly broad permissions
  --> ./examples/app-with-backend/.github/workflows/ci.yml:15:3
   |
15 |   id-token: write
   |   ^^^^^^^^^^^^^^^ id-token: write is overly broad at the workflow level
   |
   = note: audit confidence → High

error[excessive-permissions]: overly broad permissions
  --> ./examples/app-with-backend/.github/workflows/ci.yml:16:3
   |
16 |   pull-requests: write
   |   ^^^^^^^^^^^^^^^^^^^^ pull-requests: write is overly broad at the workflow level
   |
   = note: audit confidence → High

error[unpinned-uses]: unpinned action reference
  --> ./examples/app-with-backend/.github/workflows/ci.yml:65:9
   |
65 |         uses: magefile/mage-action@v3
   |         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ action is not pinned to a hash (required by blanket policy)
   |
   = note: audit confidence → High

error[unpinned-uses]: unpinned action reference
  --> ./examples/app-with-backend/.github/workflows/ci.yml:72:9
   |
72 |         uses: magefile/mage-action@v3
   |         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ action is not pinned to a hash (required by blanket policy)
   |
   = note: audit confidence → High

error[excessive-permissions]: overly broad permissions
  --> ./examples/datasource-basic/.github/workflows/ci.yml:14:3
   |
14 |   contents: write
   |   ^^^^^^^^^^^^^^^ contents: write is overly broad at the workflow level
   |
   = note: audit confidence → High

error[excessive-permissions]: overly broad permissions
  --> ./examples/datasource-basic/.github/workflows/ci.yml:15:3
   |
15 |   id-token: write
   |   ^^^^^^^^^^^^^^^ id-token: write is overly broad at the workflow level
   |
   = note: audit confidence → High

error[excessive-permissions]: overly broad permissions
  --> ./examples/datasource-basic/.github/workflows/ci.yml:16:3
   |
16 |   pull-requests: write
   |   ^^^^^^^^^^^^^^^^^^^^ pull-requests: write is overly broad at the workflow level
   |
   = note: audit confidence → High

error[unpinned-uses]: unpinned action reference
  --> ./examples/datasource-basic/.github/workflows/ci.yml:65:9
   |
65 |         uses: magefile/mage-action@v3
   |         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ action is not pinned to a hash (required by blanket policy)
   |
   = note: audit confidence → High

error[unpinned-uses]: unpinned action reference
  --> ./examples/datasource-basic/.github/workflows/ci.yml:72:9
   |
72 |         uses: magefile/mage-action@v3
   |         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ action is not pinned to a hash (required by blanket policy)
   |
   = note: audit confidence → High

error[excessive-permissions]: overly broad permissions
  --> ./examples/datasource-with-backend/.github/workflows/ci.yml:14:3
   |
14 |   contents: write
   |   ^^^^^^^^^^^^^^^ contents: write is overly broad at the workflow level
   |
   = note: audit confidence → High

error[excessive-permissions]: overly broad permissions
  --> ./examples/datasource-with-backend/.github/workflows/ci.yml:15:3
   |
15 |   id-token: write
   |   ^^^^^^^^^^^^^^^ id-token: write is overly broad at the workflow level
   |
   = note: audit confidence → High

error[excessive-permissions]: overly broad permissions
  --> ./examples/datasource-with-backend/.github/workflows/ci.yml:16:3
   |
16 |   pull-requests: write
   |   ^^^^^^^^^^^^^^^^^^^^ pull-requests: write is overly broad at the workflow level
   |
   = note: audit confidence → High

error[unpinned-uses]: unpinned action reference
  --> ./examples/datasource-with-backend/.github/workflows/ci.yml:65:9
   |
65 |         uses: magefile/mage-action@v3
   |         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ action is not pinned to a hash (required by blanket policy)
   |
   = note: audit confidence → High

error[unpinned-uses]: unpinned action reference
  --> ./examples/datasource-with-backend/.github/workflows/ci.yml:72:9
   |
72 |         uses: magefile/mage-action@v3
   |         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ action is not pinned to a hash (required by blanket policy)
   |
   = note: audit confidence → High

error[excessive-permissions]: overly broad permissions
  --> ./examples/panel-basic/.github/workflows/ci.yml:14:3
   |
14 |   contents: write
   |   ^^^^^^^^^^^^^^^ contents: write is overly broad at the workflow level
   |
   = note: audit confidence → High

error[excessive-permissions]: overly broad permissions
  --> ./examples/panel-basic/.github/workflows/ci.yml:15:3
   |
15 |   id-token: write
   |   ^^^^^^^^^^^^^^^ id-token: write is overly broad at the workflow level
   |
   = note: audit confidence → High

error[excessive-permissions]: overly broad permissions
  --> ./examples/panel-basic/.github/workflows/ci.yml:16:3
   |
16 |   pull-requests: write
   |   ^^^^^^^^^^^^^^^^^^^^ pull-requests: write is overly broad at the workflow level
   |
   = note: audit confidence → High

error[unpinned-uses]: unpinned action reference
  --> ./examples/panel-basic/.github/workflows/ci.yml:65:9
   |
65 |         uses: magefile/mage-action@v3
   |         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ action is not pinned to a hash (required by blanket policy)
   |
   = note: audit confidence → High

error[unpinned-uses]: unpinned action reference
  --> ./examples/panel-basic/.github/workflows/ci.yml:72:9
   |
72 |         uses: magefile/mage-action@v3
   |         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ action is not pinned to a hash (required by blanket policy)
   |
   = note: audit confidence → High

119 findings (60 ignored, 34 suppressed): 0 unknown, 0 informational, 0 low, 0 medium, 25 high

@github-actions github-actions bot force-pushed the update-plugin-examples branch from 6a699ce to bb82c0d Compare June 8, 2025 00:27
@github-project-automation github-project-automation bot moved this from 💡 Ideation to 🔬 In review in Plugins Platform / Grafana Community Jun 12, 2025
@academo academo closed this Jun 12, 2025
@github-project-automation github-project-automation bot moved this from 🔬 In review to 🚀 Shipped in Plugins Platform / Grafana Community Jun 12, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

Development

Successfully merging this pull request may close these issues.

2 participants