Skip to content

Conversation

petewall
Copy link
Collaborator

No description provided.

@petewall petewall self-assigned this Apr 16, 2025
@petewall petewall linked an issue Apr 16, 2025 that may be closed by this pull request
petewall added 3 commits June 27, 2025 16:00
Signed-off-by: Pete Wall <pete.wall@grafana.com>
Signed-off-by: Pete Wall <pete.wall@grafana.com>
Signed-off-by: Pete Wall <pete.wall@grafana.com>
@petewall petewall force-pushed the chore/better-integration-test-targeting branch from e70e100 to 83700f2 Compare June 27, 2025 21:00
Copy link
Contributor

😢 zizmor failed with exit code 14.

Expand for full output
error[template-injection]: code injection via template expansion
  --> ./.github/workflows/integration-test.yml:42:9
   |
42 |   ... - name: List tests
   |         ^^^^^^^^^^^^^^^^ this step
43 |   ...   id: list_tests
...
46 |   ...     LABELS: ${{ toJson(github.event.pull_request.labels.*.name) }}
47 | / ...   run: |
48 | | ...     # If "integration-test-skip" is set, return an empty list
...  |
86 | | ...
87 | | ...     echo "tests=$(echo "${tests}" | jq --raw-input --slurp --compact-output 'split("\n") | map(select(. != ""))')" >> "${GITHUB_OUTPUT}"
   | |____________________________________________________________________________________________________________________________________________^ github.base_ref may expand into attacker-controllable code
   |
   = note: audit confidence → High

error[template-injection]: code injection via template expansion
  --> ./.github/workflows/integration-test.yml:42:9
   |
42 |   ... - name: List tests
   |         ^^^^^^^^^^^^^^^^ this step
43 |   ...   id: list_tests
...
46 |   ...     LABELS: ${{ toJson(github.event.pull_request.labels.*.name) }}
47 | / ...   run: |
48 | | ...     # If "integration-test-skip" is set, return an empty list
...  |
86 | | ...
87 | | ...     echo "tests=$(echo "${tests}" | jq --raw-input --slurp --compact-output 'split("\n") | map(select(. != ""))')" >> "${GITHUB_OUTPUT}"
   | |____________________________________________________________________________________________________________________________________________^ github.base_ref may expand into attacker-controllable code
   |
   = note: audit confidence → High

3 findings (1 suppressed): 0 unknown, 0 informational, 0 low, 0 medium, 2 high

@petewall petewall closed this Jun 27, 2025
@petewall petewall deleted the chore/better-integration-test-targeting branch June 27, 2025 21:28
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Chore: Better integration test targeting
1 participant