Merge pull request #1516 from crazy-max/fix-zizmor
Some checks are pending
codeql / analyze (push) Waiting to run
e2e / build (acr, Azure Container Registry, officialgithubactions.azurecr.io, officialgithubactions.azurecr.io/test-docker-action, remote) (push) Waiting to run
e2e / build (artifactory, Artifactory, infradock.jfrog.io, infradock.jfrog.io/test-ghaction/build-push-action, remote) (push) Waiting to run
e2e / build (aws, AWS ECR Public, public.ecr.aws, public.ecr.aws/q3b5f1u4/test-docker-action, remote) (push) Waiting to run
e2e / build (aws, AWS ECR, 175142243308.dkr.ecr.us-east-2.amazonaws.com, 175142243308.dkr.ecr.us-east-2.amazonaws.com/sandbox/test-docker-action, remote) (push) Waiting to run
e2e / build (dockerhub, Docker Hub, , ghactionstest/ghactionstest, remote) (push) Waiting to run
e2e / build (gar, Google Artifact Registry, us-east4-docker.pkg.dev, us-east4-docker.pkg.dev/sandbox-298914/docker-official-github-actions/test-docker-action, remote) (push) Waiting to run
e2e / build (ghcr, GitHub, ghcr.io, ghcr.io/docker-ghactiontest/test, remote) (push) Waiting to run
e2e / build (gitlab, GitLab, registry.gitlab.com, registry.gitlab.com/test1716/test, remote) (push) Waiting to run
e2e / build (none, distribution, Distribution, local) (push) Waiting to run
e2e / build (none, harbor, Harbor, local) (push) Waiting to run
e2e / build (none, nexus, Nexus, local) (push) Waiting to run
e2e / build (quay, Quay, quay.io, quay.io/docker_build_team/ghactiontest, remote) (push) Waiting to run
test / test (push) Waiting to run
validate / prepare (push) Waiting to run
validate / validate (push) Blocked by required conditions
zizmor / zizmor (push) Waiting to run

ci(zizmor): update rules
This commit is contained in:
Tõnis Tiigi 2026-04-15 14:25:13 -07:00 committed by GitHub
commit c269a24fa2
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
2 changed files with 2 additions and 3 deletions

View File

@ -19,6 +19,8 @@ updates:
interval: "daily" interval: "daily"
cooldown: cooldown:
default-days: 2 default-days: 2
exclude:
- "@docker/actions-toolkit"
versioning-strategy: "increase" versioning-strategy: "increase"
allow: allow:
- dependency-type: "production" - dependency-type: "production"

3
.github/zizmor.yml vendored
View File

@ -1,3 +0,0 @@
rules:
secrets-outside-env: # FIXME: remove this rule when zizmor 1.24.0 is released, fixing the right persona attached to this rule: https://github.com/zizmorcore/zizmor/pull/1783
disable: true