ci: fix security scanner
Metadata
Current evaluation
Merged canonical/imagecraft#426 added a one-line CI workflow fix for zizmor; zizmor and GitHub Actions security-audit checks passed.
Resolution: closed resolved
Reason: PR #426 was approved and merged into main, resolving the zizmor security-scanner failure with a one-line workflow change.
Evaluated by: mr-cal-bot
No scores available.
Issue body
fixes zizmor
---
- [ ] I've followed the [contribution guidelines](https://github.com/canonical/imagecraft/blob/main/CONTRIBUTING.md).
- [ ] I've signed the [CLA](http://www.ubuntu.com/legal/contributors/).
- [ ] I've successfully run `make lint && make test`.
- [ ] I've added or updated any relevant documentation.
- [ ] In documents I changed, I [added a meta description](https://canonical-starflow.readthedocs-hosted.com/how-to/add-a-page-meta-description/) if one was missing.
Evaluation history
| Date | Model | Scores | Action | Summary |
|---|---|---|---|---|
| stealth/space-bunny-alpha | — | closed resolved | Merged canonical/imagecraft#426 added a one-line CI workflow fix for zizmor; zizmor and GitHub Actions security-audit checks passed. | |
| stealth/space-bunny-alpha | — | closed resolved | Merged PR #426 added a one-line CI fix for Zizmor; the Zizmor and policy/GitHub Actions security-audit checks passed. | |
| stealth/space-bunny-alpha | — | closed resolved | Merged canonical/imagecraft#426 added a one-line CI workflow fix for zizmor; the zizmor and GitHub Actions security-audit checks passed. | |
| qwen/qwen3.6-35b-a3b | — | — | Merged a one-line fix for the zizmor security scanner in the CI pipeline. Approved by one reviewer and passed required checks before integration. |
Update history
| Date | Change |
|---|---|
| created |
Related issues
| Issue | Project | State | Summary | Similarity |
|---|---|---|---|---|
| #418 ci: fix security scan workflow | imagecraft | merged | Merged PR #418 (commit f7059bc) fixed zizmor CI by granting the policy job security-events: write, mirroring canonical/craft-archives#245. Dependencies were unchanged. | |
| #185 ci: fix security scanner | debcraft | merged | Merged canonical/debcraft#185 with a one-line CI security-scanner fix; all checks passed. | |
| #251 ci: update permissions for zizmor | craft-archives | merged | Merged PR canonical/craft-archives#251 (commit 2845f6b) adding a one-line GitHub Actions permissions update required by the zizmor security-scan workflow; review approved and all CI checks passed. | |
| #128 ci: add security scan workflow | craft-archives | merged | Merged security-scan workflow in canonical/craft-archives#128 via commit 70b7abb, adding automated security scanning to CI. | |
| #1924 ci: add security scan workflow | charmcraft | merged | Merged #1924 in commit 5634ecb1, adding the CI security-scan workflow after syncing canonical/craft-archives#128; two reviewers approved it. | |
| #218 ci: add security scan workflow | craft-store | merged | Merged PR #218 via commit db9a779, adding a 13-line GitHub Actions security-scan workflow after two approvals; no CI checks were reported. | |
| #999 ci: update permissions for zimzor | craft-providers | merged | Merged PR #999 by bepri added 3 lines of GitHub Actions permissions for zizmor, unblocking the security scan workflow. Zizmor and GitHub Actions security audit checks passed; only unrelated OSV-scanner/min-deps checks failed. | |
| #1156 ci: add zizmor workflow | craft-application | merged | Merged PR #1156 (commit 517f97e0) added a Zizmor GitHub Actions security-scanning workflow, adapted from canonical/starflow#151. | |
| #5068 ci: add security scan | snapcraft | merged | Merged PR #5068 in commit 040b66c00, adding CI security scanning across six files after approval by two reviewers. | |
| #168 ci: update required permissions for zizmor | starflow | merged | Merged PR #168 (commit d8bdeaf) added Zizmor's required GitHub Actions permission so the security scanner can run on internal repositories. |