Merge pull request #1516 from crazy-max/fix-zizmor

ci(zizmor): update rules
2026-07-04 11:52:52 +08:00 · 2026-04-15 14:25:13 -07:00 · 2026-04-15 16:01:32 +02:00 · 2026-04-15 14:48:56 +02:00 · 2026-04-15 14:48:40 +02:00 · 2026-04-15 11:54:10 +00:00
4 changed files with 4 additions and 5 deletions
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@ -19,6 +19,8 @@ updates:
      interval: "daily"
    cooldown:
      default-days: 2
      exclude:
        - "@docker/actions-toolkit"
    versioning-strategy: "increase"
    allow:
      - dependency-type: "production"
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@ -1044,7 +1044,7 @@ jobs:
          buildkitd-flags: --debug
      -
        name: Cache Build
-        uses: actions/cache@668228422ae6a00e4ad889ee87cd7109ec5666a7 # v5.0.4
+        uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5
        with:
          path: /tmp/.buildx-cache
          key: ${{ runner.os }}-local-test-${{ github.sha }}
--- a/.github/workflows/update-dist.yml
+++ b/.github/workflows/update-dist.yml
@ -21,7 +21,7 @@ jobs:
      -
        name: GitHub auth token from GitHub App
        id: docker-read-app
-        uses: actions/create-github-app-token@f8d387b68d61c58ab83c6c016672934102569859 # v3.0.0
+        uses: actions/create-github-app-token@1b10c78c7865c340bc4f6099eb2f838309f1e8c3 # v3.1.1
        with:
          app-id: ${{ secrets.GHACTIONS_REPO_WRITE_APP_ID }}
          private-key: ${{ secrets.GHACTIONS_REPO_WRITE_APP_PRIVATE_KEY }}
--- a/.github/zizmor.yml
+++ b/.github/zizmor.yml
@ -1,3 +0,0 @@
 rules:
  secrets-outside-env: # FIXME: remove this rule when zizmor 1.24.0 is released, fixing the right persona attached to this rule: https://github.com/zizmorcore/zizmor/pull/1783
    disable: true
Author	SHA1	Message	Date
Tõnis Tiigi	c269a24fa2	Merge pull request #1516 from crazy-max/fix-zizmor Some checks failed ci / multi-output (push) Has been cancelled Details ci / load-and-push (push) Has been cancelled Details ci / summary-disable (push) Has been cancelled Details ci / summary-not-supported (push) Has been cancelled Details ci / record-upload-disable (push) Has been cancelled Details ci / record-retention-days (0) (push) Has been cancelled Details ci / record-retention-days (2) (push) Has been cancelled Details ci / checks (edge) (push) Has been cancelled Details ci / checks (latest) (push) Has been cancelled Details ci / checks (v0.14.1) (push) Has been cancelled Details ci / annotations-disabled (push) Has been cancelled Details ci / call-check (push) Has been cancelled Details ci / no-default-attestations (push) Has been cancelled Details codeql / analyze (push) Has been cancelled Details e2e / build (acr, Azure Container Registry, officialgithubactions.azurecr.io, officialgithubactions.azurecr.io/test-docker-action, remote) (push) Has been cancelled Details e2e / build (artifactory, Artifactory, infradock.jfrog.io, infradock.jfrog.io/test-ghaction/build-push-action, remote) (push) Has been cancelled Details e2e / build (aws, AWS ECR Public, public.ecr.aws, public.ecr.aws/q3b5f1u4/test-docker-action, remote) (push) Has been cancelled Details e2e / build (aws, AWS ECR, 175142243308.dkr.ecr.us-east-2.amazonaws.com, 175142243308.dkr.ecr.us-east-2.amazonaws.com/sandbox/test-docker-action, remote) (push) Has been cancelled Details e2e / build (dockerhub, Docker Hub, , ghactionstest/ghactionstest, remote) (push) Has been cancelled Details e2e / build (gar, Google Artifact Registry, us-east4-docker.pkg.dev, us-east4-docker.pkg.dev/sandbox-298914/docker-official-github-actions/test-docker-action, remote) (push) Has been cancelled Details e2e / build (ghcr, GitHub, ghcr.io, ghcr.io/docker-ghactiontest/test, remote) (push) Has been cancelled Details e2e / build (gitlab, GitLab, registry.gitlab.com, registry.gitlab.com/test1716/test, remote) (push) Has been cancelled Details e2e / build (none, distribution, Distribution, local) (push) Has been cancelled Details e2e / build (none, harbor, Harbor, local) (push) Has been cancelled Details e2e / build (none, nexus, Nexus, local) (push) Has been cancelled Details e2e / build (quay, Quay, quay.io, quay.io/docker_build_team/ghactiontest, remote) (push) Has been cancelled Details test / test (push) Has been cancelled Details validate / prepare (push) Has been cancelled Details zizmor / zizmor (push) Has been cancelled Details validate / validate (push) Has been cancelled Details ci(zizmor): update rules	2026-04-15 14:25:13 -07:00
CrazyMax	64fda479ac	ci(zizmor): update rules Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>	2026-04-15 16:01:32 +02:00
CrazyMax	c1d0c0cc42	Merge pull request #1514 from docker/dependabot/github_actions/actions/create-github-app-token-3.1.1 chore(deps): Bump actions/create-github-app-token from 3.0.0 to 3.1.1	2026-04-15 14:48:56 +02:00
CrazyMax	d5c8665698	Merge pull request #1515 from docker/dependabot/github_actions/actions/cache-5.0.5 chore(deps): Bump actions/cache from 5.0.4 to 5.0.5	2026-04-15 14:48:40 +02:00
dependabot[bot]	e4086eff94	chore(deps): Bump actions/cache from 5.0.4 to 5.0.5 Bumps [actions/cache](https://github.com/actions/cache) from 5.0.4 to 5.0.5. - [Release notes](https://github.com/actions/cache/releases) - [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md) - [Commits](`668228422a...27d5ce7f10`) --- updated-dependencies: - dependency-name: actions/cache dependency-version: 5.0.5 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>	2026-04-15 11:54:10 +00:00
dependabot[bot]	dba6f6cfd6	chore(deps): Bump actions/create-github-app-token from 3.0.0 to 3.1.1 Bumps [actions/create-github-app-token](https://github.com/actions/create-github-app-token) from 3.0.0 to 3.1.1. - [Release notes](https://github.com/actions/create-github-app-token/releases) - [Commits](`f8d387b68d...1b10c78c78`) --- updated-dependencies: - dependency-name: actions/create-github-app-token dependency-version: 3.1.1 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>	2026-04-13 12:35:24 +00:00