Merge pull request #290 from crazy-max/zizmor-fixes
ci / default (push) Has been cancelled
ci / main (tonistiigi/binfmt:latest, all) (push) Has been cancelled
ci / main (tonistiigi/binfmt:latest, arm64,riscv64,arm) (push) Has been cancelled
ci / main (tonistiigi/binfmt:master, all) (push) Has been cancelled
ci / main (tonistiigi/binfmt:master, arm64,riscv64,arm) (push) Has been cancelled
ci / error (push) Has been cancelled
ci / cache-image (false) (push) Has been cancelled
ci / cache-image (true) (push) Has been cancelled
ci / version (tonistiigi/binfmt:latest) (push) Has been cancelled
ci / version (tonistiigi/binfmt:master) (push) Has been cancelled
ci / version (tonistiigi/binfmt:qemu-v7.0.0) (push) Has been cancelled
codeql / analyze (push) Failing after 3s
test / test (push) Failing after 2s
validate / prepare (push) Failing after 1s
validate / validate (push) Has been skipped
zizmor / zizmor (push) Failing after 0s

ci: restrict update-dist GitHub App token scope
This commit is contained in:
CrazyMax
2026-05-21 14:58:57 +02:00
committed by GitHub
+2
View File
@@ -26,6 +26,8 @@ jobs:
app-id: ${{ secrets.GHACTIONS_REPO_WRITE_APP_ID }}
private-key: ${{ secrets.GHACTIONS_REPO_WRITE_APP_PRIVATE_KEY }}
owner: docker
repositories: setup-qemu-action
permission-contents: write
-
name: Checkout
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2