← Back to issue list

chore: add zizmor permissions to policy workflow job

View original Github issue

Metadata

Project
craft-parts
Number
#1668
Type
pull request
State
merged
Author
Copilot
Labels
—
Created
Updated
Closed

Current evaluation

Merged. Added explicit contents: read and security-events: write permissions to the policy job in .github/workflows/policy.yaml to satisfy Zizmor reusable workflow requirements. Approved by three reviewers and passed CI checks.

Suggested action: —

No scores available.

Issue body

Zizmor requires explicit `permissions` on reusable workflow call jobs. Mirrors the fix applied in [canonical/craft-archives#245](https://github.com/canonical/craft-archives/pull/245). ## Changes - **`.github/workflows/policy.yaml`**: adds `permissions: contents: read, security-events: write` to the `policy` job

Evaluation history

Date Model Scores Action Summary
qwen/qwen3.6-35b-a3b — — Merged. Added explicit contents: read and security-events: write permissions to the policy job in .github/workflows/policy.yaml to satisfy Zizmor reusable workflow requirements. Approved by three reviewers and passed CI checks.
qwen/qwen3.6-35b-a3b
Staleness: 0
Complexity: 5
Confidence: 95
needs review Adds explicit zizmor permissions to the policy workflow job to satisfy GitHub Actions security scanning requirements. Approved by three reviewers with passing CI, ready for merge.
qwen/qwen3.6-35b-a3b
Staleness: 0
Complexity: 5
Confidence: 95
needs review Adds explicit permissions to the policy workflow job to satisfy zizmor requirements. Approved by two reviewers, all CI checks passing, ready to merge.
qwen/qwen3.6-35b-a3b
Staleness: 5
Complexity: 5
Confidence: 90
needs review Adds explicit permissions to the policy workflow job to satisfy Zizmor requirements. CI is passing, awaiting maintainer review.
qwen/qwen3.6-35b-a3b
Staleness: 5
Complexity: 5
Confidence: 85
needs review Adds explicit permissions to the policy workflow job to satisfy Zizmor requirements for reusable workflows. Currently pending maintainer review with passing CI checks.

Update history

Date Change
updated
updated
updated
updated
created

Related issues

Issue Project State Summary Similarity
#168 ci: update required permissions for zizmor starflow merged Merged CI workflow update adding required permissions for Zizmor. Approved by two reviewers with all checks passing. The change adds a single permission line to align with official documentation.
75%
#595 chore: make zizmor configuration less verbose starbase merged Merged to simplify zizmor configuration, allowing starflow workflows without hash pinning to reduce verbosity. Approved by two reviewers, passed all CI checks, and updated four files.
72%
#416 ci: update permissions for zizmor craft-store merged Merged following two reviewer approvals. Updated CI workflow permissions for the zizmor security tool. All required checks passed, and the four-line configuration change was integrated into the main branch.
72%
#1163 ci: add zizmor actions permission craft-application merged Merged a single-line update to grant zizmor actions permissions in the CI configuration. Approved by one reviewer and passed all security scans and tests.
72%
#591 ci: add zizmor actions permission starbase merged Merged to update GitHub Actions permissions for the zizmor security scanner. Approved by one reviewer with all CI checks passing.
72%
#251 ci: update permissions for zizmor craft-archives merged Merged after approval and passing CI checks. Updated GitHub Actions permissions for the zizmor security scanner with a single-line configuration change.
71%
#1156 ci: add zizmor workflow craft-application merged Merged the addition of the zizmor CI workflow for security scanning. Approved by two reviewers with passing checks. The change adds a single workflow file to enable automated analysis.
71%
#151 ci: add zizmor workflow starflow merged Merged a Zizmor workflow to automate CI security checks. Approved by two reviewers with all CI checks passing. The single 15-line change integrates automated security scanning into the repository pipeline.
70%
#1670 ci: add zizmor actions permission craft-parts merged Merged after approval by two reviewers. Adds required GitHub Actions permissions for the zizmor security scanner to enable CI checks. The change is minimal, modifying a single file with one line addition.
70%