Aurélien Bombo 34c8cd810d ci: Run zizmor for GHA security analysis ...

This runs the zizmor security lint [1] on our GH Actions.
The initial workflow uses [2] as a base.

[1] https://docs.zizmor.sh/
[2] https://docs.zizmor.sh/usage/#use-in-github-actions

Signed-off-by: Aurélien Bombo <abombo@microsoft.com>

2025-06-26 10:52:28 +01:00

..

actionlint.yaml

workflows: Pin action hashes

2025-06-21 08:14:13 +01:00

basic-ci-amd64.yaml

workflows: Pin action hashes

2025-06-21 08:14:13 +01:00

basic-ci-s390x.yaml

workflows: Pin action hashes

2025-06-21 08:14:13 +01:00

build-checks-preview-riscv64.yaml

workflows: Pin action hashes

2025-06-21 08:14:13 +01:00

build-checks.yaml

workflows: Pin action hashes

2025-06-21 08:14:13 +01:00

build-kata-static-tarball-amd64.yaml

workflows: Pin action hashes

2025-06-21 08:14:13 +01:00

build-kata-static-tarball-arm64.yaml

workflows: Pin action hashes

2025-06-21 08:14:13 +01:00

build-kata-static-tarball-ppc64le.yaml

workflows: Pin action hashes

2025-06-21 08:14:13 +01:00

build-kata-static-tarball-riscv64.yaml

workflows: Pin action hashes

2025-06-21 08:14:13 +01:00

build-kata-static-tarball-s390x.yaml

workflows: Pin action hashes

2025-06-21 08:14:13 +01:00

cargo-deny-runner.yaml

workflows: Pin action hashes

2025-06-21 08:14:13 +01:00

ci-coco-stability.yaml

ci: Use OIDC to log into Azure

2025-06-06 15:26:10 -05:00

ci-devel.yaml

ci: Use OIDC to log into Azure

2025-06-06 15:26:10 -05:00

ci-nightly-s390x.yaml

workflow: Add top-level permissions

2025-05-28 19:34:28 +01:00

ci-nightly.yaml

ci: Use OIDC to log into Azure

2025-06-06 15:26:10 -05:00

ci-on-push.yaml

ci: Use OIDC to log into Azure

2025-06-06 15:26:10 -05:00

ci-weekly.yaml

workflows: Pin action hashes

2025-06-21 08:14:13 +01:00

ci.yaml

workflows: Pin action hashes

2025-06-21 08:14:13 +01:00

cleanup-resources.yaml

workflows: Pin action hashes

2025-06-21 08:14:13 +01:00

codeql.yml

workflows: Pin action hashes

2025-06-21 08:14:13 +01:00

commit-message-check.yaml

workflow: Add top-level permissions

2025-05-28 19:34:28 +01:00

darwin-tests.yaml

workflows: Pin action hashes

2025-06-21 08:14:13 +01:00

docs-url-alive-check.yaml

workflows: Pin action hashes

2025-06-21 08:14:13 +01:00

gatekeeper-skipper.yaml

workflows: Pin action hashes

2025-06-21 08:14:13 +01:00

gatekeeper.yaml

workflows: Pin action hashes

2025-06-21 08:14:13 +01:00

govulncheck.yaml

ci: Add optional govulncheck security scanning to static checks

2025-06-17 20:43:00 -07:00

kata-runtime-classes-sync.yaml

workflows: Pin action hashes

2025-06-21 08:14:13 +01:00

payload-after-push.yaml

workflows: Pin action hashes

2025-06-21 08:14:13 +01:00

PR-wip-checks.yaml

workflow: Add top-level permissions

2025-05-28 19:34:28 +01:00

publish-kata-deploy-payload.yaml

workflows: Pin action hashes

2025-06-21 08:14:13 +01:00

release-amd64.yaml

workflows: Pin action hashes

2025-06-21 08:14:13 +01:00

release-arm64.yaml

workflows: Pin action hashes

2025-06-21 08:14:13 +01:00

release-ppc64le.yaml

workflows: Pin action hashes

2025-06-21 08:14:13 +01:00

release-s390x.yaml

workflows: Pin action hashes

2025-06-21 08:14:13 +01:00

release.yaml

workflows: Pin action hashes

2025-06-21 08:14:13 +01:00

run-cri-containerd-tests.yaml

workflows: Pin action hashes

2025-06-21 08:14:13 +01:00

run-k8s-tests-on-aks.yaml

workflows: Pin action hashes

2025-06-21 08:14:13 +01:00

run-k8s-tests-on-amd64.yaml

workflows: Pin action hashes

2025-06-21 08:14:13 +01:00

run-k8s-tests-on-arm64.yaml

workflows: Pin action hashes

2025-06-21 08:14:13 +01:00

run-k8s-tests-on-ppc64le.yaml

workflows: Pin action hashes

2025-06-21 08:14:13 +01:00

run-k8s-tests-on-zvsi.yaml

workflows: Pin action hashes

2025-06-21 08:14:13 +01:00

run-kata-coco-stability-tests.yaml

workflows: Pin action hashes

2025-06-21 08:14:13 +01:00

run-kata-coco-tests.yaml

workflows: Pin action hashes

2025-06-21 08:14:13 +01:00

run-kata-deploy-tests-on-aks.yaml

workflows: Pin action hashes

2025-06-21 08:14:13 +01:00

run-kata-deploy-tests.yaml

workflows: Pin action hashes

2025-06-21 08:14:13 +01:00

run-kata-monitor-tests.yaml

workflows: Pin action hashes

2025-06-21 08:14:13 +01:00

run-metrics.yaml

workflows: Pin action hashes

2025-06-21 08:14:13 +01:00

run-runk-tests.yaml

workflows: Pin action hashes

2025-06-21 08:14:13 +01:00

scorecard.yaml

workflows: Add scorecard workflow

2025-06-23 16:09:14 +01:00

shellcheck_required.yaml

workflows: Pin action hashes

2025-06-21 08:14:13 +01:00

shellcheck.yaml

workflows: Pin action hashes

2025-06-21 08:14:13 +01:00

stale.yaml

workflows: Pin action hashes

2025-06-21 08:14:13 +01:00

static-checks-self-hosted.yaml

workflow: Add top-level permissions

2025-05-28 19:34:28 +01:00

static-checks.yaml

Merge pull request #11424 from katexochen/p/regorus-oras-cache

2025-06-24 14:49:00 -07:00

zizmor.yaml

ci: Run zizmor for GHA security analysis

2025-06-26 10:52:28 +01:00