← Back to issue list

ci: update permissions for zimzor

View original Github issue

Metadata

Project
craft-cli
Number
#471
Type
pull request
State
merged
Author
bepri
Labels
—
Created
Updated
Closed

Current evaluation

Merged PR #471 as commit 04d4625, adding permissions so the zizmor security workflow could run. All listed CI checks passed.

Resolution: closed resolved

Reason: PR #471 merged as commit 04d4625. Its three-line workflow change added the permissions that prevented the security workflow from running.

Evaluated by: mr-cal-bot

No scores available.

Issue body

- [ ] Have you followed the guidelines for contributing? - [ ] Have you signed the [CLA](http://www.ubuntu.com/legal/contributors/)? - [ ] Have you successfully run `make lint && make test`? --- Fixes an issue preventing the security workflow from running.

Evaluation history

Date Model Scores Action Summary
stealth/space-bunny-alpha — closed resolved Merged PR #471 as commit 04d4625, adding permissions so the zizmor security workflow could run. All listed CI checks passed.
stealth/space-bunny-alpha — closed resolved Merged PR #471 (maintainer bepri) added 3 lines setting permissions on the zizmor security workflow, unblocking that job. Approved with all CI/security checks passing.
stealth/space-bunny-alpha — closed resolved Maintainer PR #471 in canonical/craft-cli was merged, adding the permissions block (3 lines, 1 file) so the zizmor security workflow could run; all CI/security checks passed.
stealth/space-bunny-alpha — closed resolved Merged PR #471, updating CI permissions for the zimzor security workflow so it could run. Approved with all CI and security checks passing.
qwen/qwen3.6-35b-a3b — — Merged update to CI permissions for zimzor, resolving a security workflow execution failure. Approved by one reviewer and passed all continuous integration checks.
qwen/qwen3.6-35b-a3b
Staleness: 5
Complexity: 5
Confidence: 85
needs review Updates CI permissions for zimzor to fix a broken security workflow. Currently approved by one reviewer with one unresolved comment, all CI checks passing, and awaiting final review.
qwen/qwen3.6-35b-a3b
Staleness: 0
Complexity: 5
Confidence: 90
needs review Updates CI permissions for zimzor to fix a broken security workflow. All CI checks pass. Awaiting maintainer review with one unresolved comment.

Update history

Date Change
updated
updated
created

Related issues

Issue Project State Summary Similarity
#1324 ci: update permissions for zimzor rockcraft merged Merged as 36c7b7b4: PR #1324 by bepri added 4 lines of GitHub Actions permissions so the zizmor security workflow/job runs again; approved by 2 reviewers.
90%
#245 ci: update permissions for zimzor craft-archives merged Merged PR #245 updated the GitHub Actions security workflow permissions, allowing the zizmor security check to run.
89%
#208 ci: update permissions for zimzor craft-grammar merged Merged PR #208 as commit d280e77, updating GitHub Actions permissions so the zizmor security workflow could run.
89%
#999 ci: update permissions for zimzor craft-providers merged Merged PR #999 by bepri added 3 lines of GitHub Actions permissions for zizmor, unblocking the security scan workflow. Zizmor and GitHub Actions security audit checks passed; only unrelated OSV-scanner/min-deps checks failed.
87%
#416 ci: update permissions for zizmor craft-store merged PR #416 by bepri merged into main (commit 7ca1f48), granting the zizmor GitHub Actions security-audit job the permissions it needed so the check runs. 4-line workflow change, approved by 2 reviewers.
86%
#251 ci: update permissions for zizmor craft-archives merged Merged PR canonical/craft-archives#251 (commit 2845f6b) adding a one-line GitHub Actions permissions update required by the zizmor security-scan workflow; review approved and all CI checks passed.
85%
#168 ci: update required permissions for zizmor starflow merged Merged PR #168 (commit d8bdeaf) added Zizmor's required GitHub Actions permission so the security scanner can run on internal repositories.
83%
#1015 ci: add permissions for zizmor craft-providers closed Merged as commit 74137d6, adding the workflow permissions required for the zizmor action to run.
83%
#591 ci: add zizmor actions permission starbase merged Merged PR #591 (maintainer bepri) added the missing `actions` permission to the zizmor security-audit job in .github/workflows/policy.yaml (+1/-0), unblocking the zizmor check; approved with all CI checks green.
81%
#1163 ci: add zizmor actions permission craft-application merged Merged #1163, adding actions: read to the zizmor job's workflow permissions; merged as d4f1124c after review and all CI checks passed.
80%