Skip to content

Introduce zizmor to harden GitHub Actions workflows#10

Merged
trinistr merged 2 commits intomainfrom
fix-gha-vulnerabilities
Aug 20, 2025
Merged

Introduce zizmor to harden GitHub Actions workflows#10
trinistr merged 2 commits intomainfrom
fix-gha-vulnerabilities

Conversation

@trinistr
Copy link
Owner

No description provided.

@trinistr trinistr force-pushed the fix-gha-vulnerabilities branch from 0856be9 to 802cbd5 Compare August 20, 2025 10:42
@trinistr trinistr force-pushed the fix-gha-vulnerabilities branch from 802cbd5 to 5c93110 Compare August 20, 2025 10:46
@github-advanced-security
Copy link

This pull request sets up GitHub code scanning for this repository. Once the scans have completed and the checks have passed, the analysis results for this pull request branch will appear on this overview. Once you merge this pull request, the 'Security' tab will show more code scanning analysis results (for example, for the default branch). Depending on your configuration and choice of analysis tool, future pull requests will be annotated with code scanning analysis results. For more information about GitHub code scanning, check out the documentation.

@github-actions
Copy link

Coverage after merging fix-gha-vulnerabilities into main will be

99.52%

Coverage Report
FileStmtsBranchesFuncsLinesUncovered Lines
./lib
   object_forge.rb100%100%100%100%
./lib/object_forge
   crucible.rb100%100%100%100%
   forge.rb100%100%100%100%
   forge_dsl.rb100%100%100%100%
   forgeyard.rb100%100%100%100%
   molds.rb100%100%100%100%
   sequence.rb100%100%100%100%
   un_basic_object.rb90%100%100%90%
./lib/object_forge/molds
   hash_mold.rb100%100%100%100%
   keywords_mold.rb100%100%100%100%
   mold_mold.rb100%100%100%100%
   single_argument_mold.rb100%100%100%100%
   struct_mold.rb93.55%100%100%90.91%
   wrapped_mold.rb100%100%100%100%
./spec
   object_forge_spec.rb100%100%100%100%
./spec/object_forge
   crucible_spec.rb100%100%100%100%
   forge_dsl_spec.rb100%100%100%100%
   forge_spec.rb100%100%100%100%
   forgeyard_spec.rb100%100%100%100%
   sequence_spec.rb100%100%100%100%
   un_basic_object_spec.rb100%100%100%100%
./spec/object_forge/molds
   hash_mold_spec.rb100%100%100%100%
   keywords_mold_spec.rb100%100%100%100%
   mold_mold_spec.rb100%100%100%100%
   single_argument_mold_spec.rb100%100%100%100%
   struct_mold_spec.rb96.36%100%100%96.30%
   wrapped_mold_spec.rb100%100%100%100%
./spec/support
   has_an_alias.rb100%100%100%100%
   negated_matchers.rb100%100%100%100%

@trinistr trinistr changed the title Harden workflows according to zizmor recommendations Introduce zizmor to harden GitHub Actions workflows Aug 20, 2025
@trinistr trinistr merged commit 7512d6a into main Aug 20, 2025
14 checks passed
@trinistr trinistr deleted the fix-gha-vulnerabilities branch August 20, 2025 17:52
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant