Skip to content

chore(zizmor): update for template-injection - #1222

Merged
L2D2Grafana merged 4 commits into
mainfrom
l2d2/zizmor-fixes
Apr 28, 2025
Merged

chore(zizmor): update for template-injection#1222
L2D2Grafana merged 4 commits into
mainfrom
l2d2/zizmor-fixes

Conversation

@L2D2Grafana

@L2D2Grafana L2D2Grafana commented Apr 28, 2025

Copy link
Copy Markdown
Collaborator

Fixing template injection errors zizmor --collect=workflows-only .github/workflows

info[template-injection]: code injection via template expansion
  --> .github/workflows/release.yml:46:9
   |
46 |         - id: 'create-latest'
   |  _________-
47 | |         run: cp ${{ steps.build-release.outputs.archive }} ${{ steps.metadata.outputs.archive }}
   | |         ----------------------------------------------------------------------------------------
   | |_________|______________________________________________________________________________________|
   |           |                                                                                      info: this step
   |           info: steps.metadata.outputs.archive may expand into attacker-controllable code
   |
   = note: audit confidence → Low

@L2D2Grafana
L2D2Grafana requested a review from a team as a code owner April 28, 2025 16:38

@svennergr svennergr left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

lgtm

@L2D2Grafana
L2D2Grafana merged commit e565937 into main Apr 28, 2025
@gtk-grafana gtk-grafana added this to the 1.0.14 milestone Apr 29, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants