DmitriyLewen e368e32897 ci(test): add zizmor security linter for GitHub Actions (#502) ...

* ci: add zizmor security linter for GitHub Actions

* ci: disable advanced-security for zizmor

* ci: pin all actions to commit hashes

* ci: fix zizmor linter errors in workflows

- Add explicit permissions blocks to all workflows
- Set persist-credentials: false for checkout actions
- Fix template injection by using env variables in run blocks

* fix: address zizmor template injection warnings in action.yaml

- Move inputs to env block to prevent template injection
- Add ignore comment for github-env false positive

* ci: fix remaining zizmor linter errors

- Add permissions and persist-credentials to test.yaml
- Fix ignore comment placement for github-env in action.yaml

2026-02-20 15:24:24 -07:00

..

bump-trivy.yaml

ci(test): add zizmor security linter for GitHub Actions (#502)

2026-02-20 15:24:24 -07:00

sync-trivy-checks.yaml

ci(test): add zizmor security linter for GitHub Actions (#502)

2026-02-20 15:24:24 -07:00

sync-trivy-db.yaml

ci(test): add zizmor security linter for GitHub Actions (#502)

2026-02-20 15:24:24 -07:00

sync-trivy-java-db.yaml

ci(test): add zizmor security linter for GitHub Actions (#502)

2026-02-20 15:24:24 -07:00

test.yaml

ci(test): add zizmor security linter for GitHub Actions (#502)

2026-02-20 15:24:24 -07:00