ci: fix release workflow
Metadata
Current evaluation
Merged to fix a failing CI release workflow. A prior zizmor update broke the gh CLI by omitting the repository context. Added the required repo argument, resolving the failure. All checks passed and the change was approved by two reviewers.
Suggested action: —
No scores available.
Issue body
This step was updated in https://github.com/canonical/starbase/pull/585 to satisfy a zizmor warning.
However, it's [failing](https://github.com/canonical/craft-archives/actions/runs/33912721254/job/101152850081) because `gh` needs to know the repo.
---
- [x] I've followed the [contribution guidelines](https://github.com/canonical/starbase/blob/main/CONTRIBUTING.md).
- [x] I've signed the [CLA](http://www.ubuntu.com/legal/contributors/).
- [x] I've successfully run `make lint && make test`.
- [ ] I've added or updated any relevant documentation.
- [ ] In documents I changed, I [added a meta description](https://canonical-starflow.readthedocs-hosted.com/how-to/add-a-page-meta-description/) if one was missing.
- [ ] I've updated the relevant release notes.
Evaluation history
| Date | Model | Scores | Action | Summary |
|---|---|---|---|---|
| qwen/qwen3.6-35b-a3b | — | — | Merged to fix a failing CI release workflow. A prior zizmor update broke the gh CLI by omitting the repository context. Added the required repo argument, resolving the failure. All checks passed and the change was approved by two reviewers. | |
| qwen3.6-35b-a3b-mtp-q6 |
Impact:
30
Quick Win:
28.5
Staleness:
5
Complexity:
5
Confidence:
85
|
needs review | Fixes release workflow broken by starbase#585 by adding repo context for gh. All CI passing, awaiting review. |
Update history
| Date | Change |
|---|---|
| updated | |
| updated | |
| updated | |
| created |
Related issues
| Issue | Project | State | Summary | Similarity |
|---|---|---|---|---|
| #151 ci: add zizmor workflow | starflow | merged | Merged a Zizmor workflow to automate CI security checks. Approved by two reviewers with all CI checks passing. The single 15-line change integrates automated security scanning into the repository pipeline. | |
| #416 ci: update permissions for zizmor | craft-store | merged | Merged following two reviewer approvals. Updated CI workflow permissions for the zizmor security tool. All required checks passed, and the four-line configuration change was integrated into the main branch. | |
| #585 fix(ci): resolve all zizmor findings in GitHub workflows | starbase | merged | Merged. Resolved all 44 zizmor findings in GitHub Actions by pinning actions to commit hashes, restricting permissions, removing secrets inheritance, replacing a release action with a script, and adding justified ignores. All CI checks passed. | |
| #1156 ci: add zizmor workflow | craft-application | merged | Merged the addition of the zizmor CI workflow for security scanning. Approved by two reviewers with passing checks. The change adds a single workflow file to enable automated analysis. | |
| #168 ci: update required permissions for zizmor | starflow | merged | Merged CI workflow update adding required permissions for Zizmor. Approved by two reviewers with all checks passing. The change adds a single permission line to align with official documentation. | |
| #809 fix(ci): install correct dependencies in the release workflow | craft-application | merged | Merged a fix for the CI release workflow that corrected dependency installation, resolving a broken GitHub Actions run. Approved by two reviewers with minimal code changes (+4/-2 lines). | |
| #471 ci: update permissions for zimzor | craft-cli | merged | Merged update to CI permissions for zimzor, resolving a security workflow execution failure. Approved by one reviewer and passed all continuous integration checks. | |
| #6393 ci: fix zizmor warnings | snapcraft | merged | Merged after approval by two reviewers. Resolved zizmor CI warnings across two files with minimal changes. | |
| #426 ci: fix security scanner | imagecraft | merged | Merged a one-line fix for the zizmor security scanner in the CI pipeline. Approved by one reviewer and passed required checks before integration. | |
| #193 ci: fix publishing workflow | craft-archives | merged | Merged a pull request titled ci: fix publishing workflow. The change modified one file with four additions and two deletions, was approved by two reviewers, passed all CI checks, and successfully resolved the publishing workflow issue. |