Add a single-precision job to GitHub CI #489
Triggered via pull request
September 6, 2026 09:06
yuvaltassa
synchronize
#3448
Status
Failure
Total duration
56s
Artifacts
2
github_actions_scan.yml Required
on: pull_request_target
Annotations
20 errors and 2 warnings
|
zizmor/unpinned-uses:
.github/workflows/build.yml#L252
unpinned action reference: action is not pinned to a hash (required by blanket policy)
|
|
zizmor/unpinned-uses:
.github/workflows/build.yml#L246
unpinned action reference: action is not pinned to a hash (required by blanket policy)
|
|
zizmor/unpinned-uses:
.github/workflows/build.yml#L120
unpinned action reference: action is not pinned to a hash (required by blanket policy)
|
|
zizmor/unpinned-uses:
.github/workflows/build.yml#L107
unpinned action reference: action is not pinned to a hash (required by blanket policy)
|
|
zizmor/unpinned-uses:
.github/workflows/build.yml#L90
unpinned action reference: action is not pinned to a hash (required by blanket policy)
|
|
zizmor/unpinned-uses:
.github/workflows/build.yml#L81
unpinned action reference: action is not pinned to a hash (required by blanket policy)
|
|
zizmor/unpinned-uses:
.github/workflows/build.yml#L71
unpinned action reference: action is not pinned to a hash (required by blanket policy)
|
|
zizmor/unpinned-uses:
.github/workflows/build.yml#L55
unpinned action reference: action is not pinned to a hash (required by blanket policy)
|
|
zizmor/template-injection:
.github/workflows/build.yml#L163
code injection via template expansion: may expand into attacker-controllable code
|
|
zizmor-output
Found 19 findings for mandatory checks that must always succeed.
|
|
unpinned-uses:
.github/workflows/build.yml#L318
build.yml:318: unpinned action reference: action is not pinned to a hash (required by blanket policy)
|
|
unpinned-uses:
.github/workflows/build.yml#L252
build.yml:252: unpinned action reference: action is not pinned to a hash (required by blanket policy)
|
|
unpinned-uses:
.github/workflows/build.yml#L246
build.yml:246: unpinned action reference: action is not pinned to a hash (required by blanket policy)
|
|
unpinned-uses:
.github/workflows/build.yml#L120
build.yml:120: unpinned action reference: action is not pinned to a hash (required by blanket policy)
|
|
unpinned-uses:
.github/workflows/build.yml#L107
build.yml:107: unpinned action reference: action is not pinned to a hash (required by blanket policy)
|
|
unpinned-uses:
.github/workflows/build.yml#L90
build.yml:90: unpinned action reference: action is not pinned to a hash (required by blanket policy)
|
|
unpinned-uses:
.github/workflows/build.yml#L81
build.yml:81: unpinned action reference: action is not pinned to a hash (required by blanket policy)
|
|
unpinned-uses:
.github/workflows/build.yml#L71
build.yml:71: unpinned action reference: action is not pinned to a hash (required by blanket policy)
|
|
unpinned-uses:
.github/workflows/build.yml#L55
build.yml:55: unpinned action reference: action is not pinned to a hash (required by blanket policy)
|
|
template-injection:
.github/workflows/build.yml#L163
build.yml:163: code injection via template expansion: may expand into attacker-controllable code
|
|
zizmor-config
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: google-github-actions/auth@c200f3691d83b41bf9bbd8638997a462592937ed. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
zizmor-upload
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: google-github-actions/auth@c200f3691d83b41bf9bbd8638997a462592937ed. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
Artifacts
Produced during runtime
| Name | Size | Digest | |
|---|---|---|---|
|
zizmor
Expired
|
4.4 KB |
sha256:c7a0c83c694bd4887024c3cc39b7aaa5ea66e2e7a0a8d585987b235555f0c8ee
|
|
|
zizmor-config
Expired
|
342 Bytes |
sha256:7de926f91f1c1eef6094bbbda547c406b9491d759ea3804368721124f0be78df
|
|