← Back to issue list

ci: fix security scan workflow

View original Github issue

Metadata

Project
imagecraft
Number
#418
Type
pull request
State
merged
Author
lengau
Labels
—
Created
Updated
Closed

Current evaluation

Merged PR #418 (commit f7059bc) fixed zizmor CI by granting the policy job security-events: write, mirroring canonical/craft-archives#245. Dependencies were unchanged.

Resolution: closed resolved

Reason: PR #418 was approved and merged as commit f7059bc. Its policy workflow now includes security-events: write, resolving the missing-permission zizmor finding.

Evaluated by: mr-cal-bot

No scores available.

Issue body

Replicating changes from https://github.com/canonical/craft-archives/pull/245 to fix zizmor CI by adding security-events: write permission to policy job. This does not actually update the dependencies.

Evaluation history

Date Model Scores Action Summary
stealth/space-bunny-alpha — closed resolved Merged PR #418 (commit f7059bc) fixed zizmor CI by granting the policy job security-events: write, mirroring canonical/craft-archives#245. Dependencies were unchanged.
stealth/space-bunny-alpha — closed resolved Merged PR added security-events: write to the policy job, matching craft-archives#245, so zizmor could run without changing dependencies.
qwen/qwen3.6-35b-a3b — — Merged after two approvals. Added security-events write permission to the policy job, resolving the zizmor CI security scan failure. Changes replicate prior updates without modifying dependencies.
qwen/qwen3.6-35b-a3b
Staleness: 5
Complexity: 5
Confidence: 85
needs review Adds security-events write permission to the policy job to fix the zizmor CI workflow. Approved by one reviewer, with two CI checks currently failing.
qwen/qwen3.6-35b-a3b
Staleness: 5
Complexity: 5
Confidence: 85
needs review Adds security-events write permission to the policy job to fix the zizmor CI workflow. Currently awaiting maintainer review with most CI checks passing.
qwen/qwen3.6-35b-a3b
Staleness: 0
Complexity: 5
Confidence: 90
needs review Adds security-events: write permission to the policy job to fix the zizmor CI workflow. Currently pending maintainer review with one failing OSV-scanner check and other checks passing.
qwen/qwen3.6-35b-a3b
Staleness: 5
Complexity: 5
Confidence: 90
needs review Adds security-events: write permission to the policy job to fix zizmor CI. Currently pending maintainer review with minor failing CI checks on PR title and OSV-scanner.

Update history

Date Change
updated
updated
updated
updated
created

Related work

Related issues

Issue Project State Summary Similarity
#426 ci: fix security scanner imagecraft merged Merged canonical/imagecraft#426 added a one-line CI workflow fix for zizmor; zizmor and GitHub Actions security-audit checks passed.
85%
#1924 ci: add security scan workflow charmcraft merged Merged #1924 in commit 5634ecb1, adding the CI security-scan workflow after syncing canonical/craft-archives#128; two reviewers approved it.
83%
#128 ci: add security scan workflow craft-archives merged Merged security-scan workflow in canonical/craft-archives#128 via commit 70b7abb, adding automated security scanning to CI.
82%
#666 ci: add security scan workflow craft-providers merged Merged PR #666 added a CI security-scan workflow; merge commit b1abe71 records the change.
80%
#56 ci: add security scanning workflow craft-grammar merged Merged security-scanning CI workflow via PR #56, recorded in commit a6f1a1d.
79%
#859 ci: add security scanning job craft-parts merged Merged PR #859 added a 15-line CI security-scanning job; the change landed in commit 19ec5517.
79%
#494 ci: add security scanning job craft-application merged PR #494 was merged as 0b10cf66, adding a 15-line CI job for automated security scanning.
78%
#5068 ci: add security scan snapcraft merged Merged PR #5068 in commit 040b66c00, adding CI security scanning across six files after approval by two reviewers.
78%
#185 ci: fix security scanner debcraft merged Merged canonical/debcraft#185 with a one-line CI security-scanner fix; all checks passed.
77%
#716 ci: add security scan workflow rockcraft merged Merged PR #716 added the security-scan workflow; commit 94b6877e records the change in the repository history.
76%