← Back to issue list

ci: update permissions for zimzor

View original Github issue

Metadata

Project
craft-archives
Number
#245
Type
pull request
State
merged
Author
bepri
Labels
—
Created
Updated
Closed

Current evaluation

Merged PR #245 updated the GitHub Actions security workflow permissions, allowing the zizmor security check to run.

Resolution: closed resolved

Reason: PR #245 was merged after maintainer approval and added the permissions required by zizmor. The zizmor and GitHub Actions security-audit checks passed.

Evaluated by: mr-cal-bot

No scores available.

Issue body

- [ ] Have you followed the guidelines for contributing? - [ ] Have you signed the [CLA](http://www.ubuntu.com/legal/contributors/)? - [ ] Have you successfully run `make lint && make test`? --- Fixes an issue that prevents the security workflow to run.

Evaluation history

Date Model Scores Action Summary
stealth/space-bunny-alpha — closed resolved Merged PR #245 updated the GitHub Actions security workflow permissions, allowing the zizmor security check to run.
stealth/space-bunny-alpha — closed resolved Merged PR #245 updated the security workflow permissions so the zizmor check could run.
qwen/qwen3.6-35b-a3b — — Merged update to CI permissions for zimzor, resolving a security workflow execution blockage. Approved by a reviewer and passed all CI checks.
qwen/qwen3.6-35b-a3b — — Merged a single-line CI permission update for zimzor. The change resolved a blockage preventing the security workflow from running. Approved by a reviewer and passed all CI checks prior to integration.
qwen/qwen3.6-35b-a3b
Staleness: 5
Complexity: 5
Confidence: 90
needs review Updates CI permissions for zimzor to fix a broken security workflow. Approved by one reviewer, zero unresolved comments, and ready for merge pending a single failing CI check.
qwen/qwen3.6-35b-a3b
Staleness: 5
Complexity: 10
Confidence: 90
needs review Updates CI workflow permissions to fix a broken security workflow. Currently pending maintainer review with one unresolved comment and one failing CI check.

Update history

Date Change
updated
updated
created

Related issues

Issue Project State Summary Similarity
#208 ci: update permissions for zimzor craft-grammar merged Merged PR #208 as commit d280e77, updating GitHub Actions permissions so the zizmor security workflow could run.
97%
#1324 ci: update permissions for zimzor rockcraft merged Merged as 36c7b7b4: PR #1324 by bepri added 4 lines of GitHub Actions permissions so the zizmor security workflow/job runs again; approved by 2 reviewers.
95%
#999 ci: update permissions for zimzor craft-providers merged Merged PR #999 by bepri added 3 lines of GitHub Actions permissions for zizmor, unblocking the security scan workflow. Zizmor and GitHub Actions security audit checks passed; only unrelated OSV-scanner/min-deps checks failed.
94%
#168 ci: update required permissions for zizmor starflow merged Merged PR #168 (commit d8bdeaf) added Zizmor's required GitHub Actions permission so the security scanner can run on internal repositories.
91%
#416 ci: update permissions for zizmor craft-store merged PR #416 by bepri merged into main (commit 7ca1f48), granting the zizmor GitHub Actions security-audit job the permissions it needed so the check runs. 4-line workflow change, approved by 2 reviewers.
90%
#471 ci: update permissions for zimzor craft-cli merged Merged PR #471 as commit 04d4625, adding permissions so the zizmor security workflow could run. All listed CI checks passed.
89%
#251 ci: update permissions for zizmor craft-archives merged Merged PR canonical/craft-archives#251 (commit 2845f6b) adding a one-line GitHub Actions permissions update required by the zizmor security-scan workflow; review approved and all CI checks passed.
89%
#1670 ci: add zizmor actions permission craft-parts merged Merged PR #1670, adding the actions permission required by the zizmor workflow and resolving its GitHub Actions security finding.
86%
#591 ci: add zizmor actions permission starbase merged Merged PR #591 (maintainer bepri) added the missing `actions` permission to the zizmor security-audit job in .github/workflows/policy.yaml (+1/-0), unblocking the zizmor check; approved with all CI checks green.
82%
#1015 ci: add permissions for zizmor craft-providers closed Merged as commit 74137d6, adding the workflow permissions required for the zizmor action to run.
81%