← Back to issue list

ci: update required permissions for zizmor

View original Github issue

Metadata

Project
starflow
Number
#168
Type
pull request
State
merged
Author
bepri
Labels
—
Created
Updated
Closed

Current evaluation

Merged PR #168 (commit d8bdeaf) added Zizmor's required GitHub Actions permission so the security scanner can run on internal repositories.

Resolution: closed resolved

Reason: PR #168 was approved and merged with all CI checks passing. Commit d8bdeaf records the one-line workflow permission update.

Evaluated by: mr-cal-bot

No scores available.

Issue body

According to the [Zimzor docs](https://docs.zizmor.sh/integrations/#manual-integration), this permission is also required for running Zimzor on internal repositories.

Evaluation history

Date Model Scores Action Summary
stealth/space-bunny-alpha — closed resolved Merged PR #168 (commit d8bdeaf) added Zizmor's required GitHub Actions permission so the security scanner can run on internal repositories.
stealth/space-bunny-alpha — closed resolved Merged PR #168 added the Actions permission required for Zizmor on internal repositories, enabling its security scan to run.
stealth/space-bunny-alpha — closed resolved Merged PR #168 added Zizmor's required GitHub Actions permission, enabling the security scanner on internal repositories.
qwen/qwen3.6-35b-a3b — — Merged CI workflow update adding required permissions for Zizmor. Approved by two reviewers with all checks passing. The change adds a single permission line to align with official documentation.
qwen/qwen3.6-35b-a3b
Staleness: 5
Complexity: 5
Confidence: 90
needs review Updates CI workflow permissions for Zimzor to support internal repositories per official docs. Approved by 1 reviewer, all CI checks passing, 1 unresolved comment pending.
qwen/qwen3.6-35b-a3b
Staleness: 0
Complexity: 5
Confidence: 90
needs review Updates CI workflow permissions for Zimzor to support internal repositories per official documentation. Currently pending maintainer review with all CI checks passing.

Update history

Date Change
updated
updated
created

Related work

  • Related To: starflow#169 (confidence 95%)

    Follow-up PR #169, commit d94e7e7, refined Zizmor permissions so code-security access is not required for private repositories.

Related issues

Issue Project State Summary Similarity
#245 ci: update permissions for zimzor craft-archives merged Merged PR #245 updated the GitHub Actions security workflow permissions, allowing the zizmor security check to run.
91%
#999 ci: update permissions for zimzor craft-providers merged Merged PR #999 by bepri added 3 lines of GitHub Actions permissions for zizmor, unblocking the security scan workflow. Zizmor and GitHub Actions security audit checks passed; only unrelated OSV-scanner/min-deps checks failed.
90%
#416 ci: update permissions for zizmor craft-store merged PR #416 by bepri merged into main (commit 7ca1f48), granting the zizmor GitHub Actions security-audit job the permissions it needed so the check runs. 4-line workflow change, approved by 2 reviewers.
90%
#208 ci: update permissions for zimzor craft-grammar merged Merged PR #208 as commit d280e77, updating GitHub Actions permissions so the zizmor security workflow could run.
90%
#251 ci: update permissions for zizmor craft-archives merged Merged PR canonical/craft-archives#251 (commit 2845f6b) adding a one-line GitHub Actions permissions update required by the zizmor security-scan workflow; review approved and all CI checks passed.
89%
#1670 ci: add zizmor actions permission craft-parts merged Merged PR #1670, adding the actions permission required by the zizmor workflow and resolving its GitHub Actions security finding.
88%
#1324 ci: update permissions for zimzor rockcraft merged Merged as 36c7b7b4: PR #1324 by bepri added 4 lines of GitHub Actions permissions so the zizmor security workflow/job runs again; approved by 2 reviewers.
88%
#591 ci: add zizmor actions permission starbase merged Merged PR #591 (maintainer bepri) added the missing `actions` permission to the zizmor security-audit job in .github/workflows/policy.yaml (+1/-0), unblocking the zizmor check; approved with all CI checks green.
85%
#471 ci: update permissions for zimzor craft-cli merged Merged PR #471 as commit 04d4625, adding permissions so the zizmor security workflow could run. All listed CI checks passed.
83%
#1015 ci: add permissions for zizmor craft-providers closed Merged as commit 74137d6, adding the workflow permissions required for the zizmor action to run.
82%