Skip to content
Open
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion .github/workflows/assign-issues.yml
Original file line number Diff line number Diff line change
Expand Up @@ -25,7 +25,7 @@ jobs:
issues: write
steps:
- name: "Auto-assign issue"
uses: pozil/auto-assign-issue@v2
uses: pozil/auto-assign-issue@af6beea6bdf1e8eb373f061c5bc168681fc6d011 # v4.0.1
with:
assignees: dolphin1999,isaurabhuttam,prernakakkar-google
numOfAssignee: 1
Expand Down
2 changes: 1 addition & 1 deletion .github/workflows/assign-prs.yml
Original file line number Diff line number Diff line change
Expand Up @@ -14,7 +14,7 @@

name: PR assignment

on:

Check failure on line 17 in .github/workflows/assign-prs.yml

View workflow job for this annotation

GitHub Actions / zizmor-output

dangerous-triggers

assign-prs.yml:17: use of fundamentally insecure workflow trigger: pull_request_target is almost always used insecurely
pull_request_target:
types: [opened, edited, reopened]

Expand All @@ -26,7 +26,7 @@
pull-requests: write
steps:
- name: "Auto-assign PR"
uses: pozil/auto-assign-issue@v2
uses: pozil/auto-assign-issue@af6beea6bdf1e8eb373f061c5bc168681fc6d011 # v4.0.1
with:
assignees: dolphin1999,isaurabhuttam,prernakakkar-google
numOfAssignee: 1
Expand Down
2 changes: 1 addition & 1 deletion .github/workflows/header-check.yml
Original file line number Diff line number Diff line change
Expand Up @@ -19,12 +19,12 @@
branches: [ main ]

jobs:
license-check:

Check warning on line 22 in .github/workflows/header-check.yml

View workflow job for this annotation

GitHub Actions / zizmor-output

excessive-permissions

header-check.yml:22: overly broad permissions: default permissions used due to no permissions: block
name: 'License Header Check'
runs-on: ubuntu-latest
steps:
- name: 'Checkout Repository'
uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7

- name: Check License Header
uses: apache/skywalking-eyes/header@61275cc80d0798a405cb070f7d3a8aaf7cf2c2c1 # v0.8.0
2 changes: 1 addition & 1 deletion .github/workflows/json-lint.yml
Original file line number Diff line number Diff line change
Expand Up @@ -19,11 +19,11 @@
branches: [ main ]

jobs:
json-lint:

Check warning on line 22 in .github/workflows/json-lint.yml

View workflow job for this annotation

GitHub Actions / zizmor-output

excessive-permissions

json-lint.yml:22: overly broad permissions: default permissions used due to no permissions: block
runs-on: ubuntu-latest
steps:
- name: Check out code
uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7

- name: Run JSON Lint
run: jq . gemini-extension.json
2 changes: 1 addition & 1 deletion .github/workflows/markdown-checks.yml
Original file line number Diff line number Diff line change
Expand Up @@ -19,12 +19,12 @@
branches: [ main ]

jobs:
link-check:

Check warning on line 22 in .github/workflows/markdown-checks.yml

View workflow job for this annotation

GitHub Actions / zizmor-output

excessive-permissions

markdown-checks.yml:22: overly broad permissions: default permissions used due to no permissions: block
name: Run link check
runs-on: ubuntu-latest
steps:
- name: Check out code
uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7

- name: Link Checker
uses: lycheeverse/lychee-action@a8c4c7cb88f0c7386610c35eb25108e448569cb0 # v2.7.0
Expand Down
2 changes: 1 addition & 1 deletion .github/workflows/mirror-changelog.yml
Original file line number Diff line number Diff line change
Expand Up @@ -31,7 +31,7 @@ jobs:

steps:
- name: Add Toolbox Release Notes to PR Body
uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8
uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9
env:
REQUIRED_KEYWORDS: 'postgres'
with:
Expand Down
2 changes: 1 addition & 1 deletion .github/workflows/presubmit-tests.yml
Original file line number Diff line number Diff line change
Expand Up @@ -24,7 +24,7 @@ jobs:
contents: read
steps:
- name: Check out code
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1

- name: Install Gemini CLI
run: npm install @google/gemini-cli
Expand Down
2 changes: 1 addition & 1 deletion .github/workflows/sync-labels.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -29,7 +29,7 @@ jobs:
issues: 'write'
pull-requests: 'write'
steps:
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
- uses: micnncim/action-label-syncer@3abd5ab72fda571e69fffd97bd4e0033dd5f495c # v1.3.0
env:
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
Expand Down
Loading