Repository navigation
Conversation
|
A ZIP file with standard source tarball and another tarball with pre-built docs for commit 957fce0 is temporarily available: NUT-tarballs-PR-3.zip. |
The PyNUTClient publishing workflow does not use git credentials after its checkout, so do not persist them in the working copy (zizmor "artipacked" finding). Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Signed-off-by: nmbro <nmbro@users.noreply.github.com>
Only propose GitHub Actions versions published at least a week ago, so that a compromised release is more likely to be found and pulled before it is picked up, since actions are referenced by tags (zizmor "dependabot-cooldown" finding). Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Signed-off-by: nmbro <nmbro@users.noreply.github.com>
Add a "GHA-06: zizmor" workflow, which runs the zizmor static analysis of GitHub Actions workflows (a pinned version from PyPI, no third-party action) for pushes to master and PRs changing .github/ files. It shows findings as annotations, and fails for new ones of at least "medium" severity. It runs on pull_request with a read-only token. The deliberate choices of this repository are recorded, with reasons, in .github/zizmor.yml: actions are referenced by tags (updated by Dependabot), and GHA-01 uses pull_request_target on purpose. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Signed-off-by: nmbro <nmbro@users.noreply.github.com>
Signed-off-by: nmbro <nmbro@users.noreply.github.com>
|
Preparing a ZIP file with standard source tarball and another tarball with pre-built docs for commit d127a2e ... |
Owner
Author
|
Fork-only test PR for networkupstools#3753, done. |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Fork-only test of the GHA-01 comment/summary/status rewrite.