ci: update permissions for zizmor
Metadata
Current evaluation
Merged PR canonical/craft-archives#251 (commit 2845f6b) adding a one-line GitHub Actions permissions update required by the zizmor security-scan workflow; review approved and all CI checks passed.
Resolution: closed resolved
Reason: The pull request itself was the resolution: it was merged into the repository as commit 2845f6b, adding the permissions line zizmor needed. All listed CI checks, including the zizmor security scan and policy audit, passed with no failures or pending jobs.
Evaluated by: mr-cal-bot
No scores available.
Issue body
- [ ] Have you followed the guidelines for contributing?
- [ ] Have you signed the [CLA](http://www.ubuntu.com/legal/contributors/)?
- [ ] Have you successfully run `make lint && make test`?
---
Evaluation history
| Date | Model | Scores | Action | Summary |
|---|---|---|---|---|
| stealth/space-bunny-alpha | — | closed resolved | Merged PR canonical/craft-archives#251 (commit 2845f6b) adding a one-line GitHub Actions permissions update required by the zizmor security-scan workflow; review approved and all CI checks passed. | |
| stealth/space-bunny-alpha | — | closed resolved | Merged canonical/craft-archives#251 as 2845f6b, adding the one-line GitHub Actions permission update needed by zizmor; all listed CI checks passed. | |
| stealth/space-bunny-alpha | — | closed resolved | Merged a one-line CI permissions update so zizmor could run; approved with no unresolved review comments and all 21 reported checks passing. | |
| qwen/qwen3.6-35b-a3b | — | — | Merged after approval and passing CI checks. Updated GitHub Actions permissions for the zizmor security scanner with a single-line configuration change. | |
| qwen/qwen3.6-35b-a3b |
Staleness:
5
Complexity:
5
Confidence:
90
|
needs review | Updates GitHub Actions permissions for the zizmor security scanner workflow. All CI checks pass. Awaiting maintainer review. |
Update history
| Date | Change |
|---|---|
| updated | |
| created |
Related issues
| Issue | Project | State | Summary | Similarity |
|---|---|---|---|---|
| #416 ci: update permissions for zizmor | craft-store | merged | PR #416 by bepri merged into main (commit 7ca1f48), granting the zizmor GitHub Actions security-audit job the permissions it needed so the check runs. 4-line workflow change, approved by 2 reviewers. | |
| #168 ci: update required permissions for zizmor | starflow | merged | Merged PR #168 (commit d8bdeaf) added Zizmor's required GitHub Actions permission so the security scanner can run on internal repositories. | |
| #245 ci: update permissions for zimzor | craft-archives | merged | Merged PR #245 updated the GitHub Actions security workflow permissions, allowing the zizmor security check to run. | |
| #999 ci: update permissions for zimzor | craft-providers | merged | Merged PR #999 by bepri added 3 lines of GitHub Actions permissions for zizmor, unblocking the security scan workflow. Zizmor and GitHub Actions security audit checks passed; only unrelated OSV-scanner/min-deps checks failed. | |
| #208 ci: update permissions for zimzor | craft-grammar | merged | Merged PR #208 as commit d280e77, updating GitHub Actions permissions so the zizmor security workflow could run. | |
| #1324 ci: update permissions for zimzor | rockcraft | merged | Merged as 36c7b7b4: PR #1324 by bepri added 4 lines of GitHub Actions permissions so the zizmor security workflow/job runs again; approved by 2 reviewers. | |
| #471 ci: update permissions for zimzor | craft-cli | merged | Merged PR #471 as commit 04d4625, adding permissions so the zizmor security workflow could run. All listed CI checks passed. | |
| #591 ci: add zizmor actions permission | starbase | merged | Merged PR #591 (maintainer bepri) added the missing `actions` permission to the zizmor security-audit job in .github/workflows/policy.yaml (+1/-0), unblocking the zizmor check; approved with all CI checks green. | |
| #1670 ci: add zizmor actions permission | craft-parts | merged | Merged PR #1670, adding the actions permission required by the zizmor workflow and resolving its GitHub Actions security finding. | |
| #1015 ci: add permissions for zizmor | craft-providers | closed | Merged as commit 74137d6, adding the workflow permissions required for the zizmor action to run. |