Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

zizmor audit for reusable-local-build workflow #2274

Open
funnelfiasco opened this issue Nov 7, 2024 · 0 comments · May be fixed by #2276
Open

zizmor audit for reusable-local-build workflow #2274

funnelfiasco opened this issue Nov 7, 2024 · 0 comments · May be fixed by #2276
Labels
bug Something isn't working

Comments

@funnelfiasco
Copy link
Contributor

🌈 completed reusable-local-build.yaml
warning[artipacked]: credential persistence through GitHub Actions artifacts
  --> .github/workflows/reusable-local-build.yaml:34:9
   |
34 |         - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
   |  _________-
35 | |         with:
36 | |           repository: ${{ inputs.repository }}
37 | |           ref: ${{ inputs.ref }}
   | |________________________________- does not set persist-credentials: false
   |
   = note: audit confidence → Low

1 findings (0 ignored): 0 unknown, 0 informational, 0 low, 1 medium, 0 high
@funnelfiasco funnelfiasco added the bug Something isn't working label Nov 7, 2024
funnelfiasco added a commit to funnelfiasco/guac that referenced this issue Nov 7, 2024
Fixes guacsec#2274

Signed-off-by: Ben Cotton <ben@kusari.dev>
@funnelfiasco funnelfiasco linked a pull request Nov 7, 2024 that will close this issue
9 tasks
lumjjb pushed a commit to funnelfiasco/guac that referenced this issue Nov 13, 2024
Fixes guacsec#2274

Signed-off-by: Ben Cotton <ben@kusari.dev>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Something isn't working
Projects
None yet
Development

Successfully merging a pull request may close this issue.

1 participant