Aurélien Bombo 48a55ce560 security: gha: Use Zizomor's auditor mode ...

This is the strictest possible setting for Zizmor.

Signed-off-by: Aurélien Bombo <abombo@microsoft.com>

2025-09-11 08:45:13 -05:00

..

actionlint.yaml

workflows: Pin action hashes

2025-06-21 08:14:13 +01:00

basic-ci-amd64.yaml

workflows: Pin action hashes

2025-06-21 08:14:13 +01:00

basic-ci-s390x.yaml

workflows: Pin action hashes

2025-06-21 08:14:13 +01:00

build-checks-preview-riscv64.yaml

workflows: Pin action hashes

2025-06-21 08:14:13 +01:00

build-checks.yaml

workflows: Pin action hashes

2025-06-21 08:14:13 +01:00

build-kata-static-tarball-amd64.yaml

release: Copy the VERSION file to the tarball

2025-07-20 00:06:14 +02:00

build-kata-static-tarball-arm64.yaml

release: Copy the VERSION file to the tarball

2025-07-20 00:06:14 +02:00

build-kata-static-tarball-ppc64le.yaml

release: Copy the VERSION file to the tarball

2025-07-20 00:06:14 +02:00

build-kata-static-tarball-riscv64.yaml

workflows: Pin action hashes

2025-06-21 08:14:13 +01:00

build-kata-static-tarball-s390x.yaml

release: Copy the VERSION file to the tarball

2025-07-20 00:06:14 +02:00

cargo-deny-runner.yaml

gha: Eliminate use of force-skip-ci label

2025-07-02 10:29:50 -05:00

ci-coco-stability.yaml

workflows: Skip weekly coco stability tests

2025-06-27 16:51:53 +01:00

ci-devel.yaml

ci: Use OIDC to log into Azure

2025-06-06 15:26:10 -05:00

ci-nightly-s390x.yaml

workflow: Add top-level permissions

2025-05-28 19:34:28 +01:00

ci-nightly.yaml

ci: Use OIDC to log into Azure

2025-06-06 15:26:10 -05:00

ci-on-push.yaml

security: ci: remove overly broad permission

2025-06-26 12:29:23 -05:00

ci-weekly.yaml

workflows: Pin action hashes

2025-06-21 08:14:13 +01:00

ci.yaml

workflows: Pin action hashes

2025-06-21 08:14:13 +01:00

cleanup-resources.yaml

workflows: Pin action hashes

2025-06-21 08:14:13 +01:00

codeql.yml

ci: re-add codeql.yml with proper branches

2025-07-30 15:11:32 -07:00

commit-message-check.yaml

gha: Eliminate use of force-skip-ci label

2025-07-02 10:29:50 -05:00

darwin-tests.yaml

workflows: Pin action hashes

2025-06-21 08:14:13 +01:00

docs-url-alive-check.yaml

workflows: Pin action hashes

2025-06-21 08:14:13 +01:00

gatekeeper-skipper.yaml

workflows: Pin action hashes

2025-06-21 08:14:13 +01:00

gatekeeper.yaml

workflows: Pin action hashes

2025-06-21 08:14:13 +01:00

govulncheck.yaml

ci: Add optional govulncheck security scanning to static checks

2025-06-17 20:43:00 -07:00

kata-runtime-classes-sync.yaml

workflows: Pin action hashes

2025-06-21 08:14:13 +01:00

osv-scanner.yaml

workflow: Fix osv-scanner action

2025-07-17 17:29:35 +01:00

payload-after-push.yaml

workflows: Pin action hashes

2025-06-21 08:14:13 +01:00

PR-wip-checks.yaml

gha: Eliminate use of force-skip-ci label

2025-07-02 10:29:50 -05:00

publish-kata-deploy-payload.yaml

security: ci: fix template injection

2025-06-26 12:29:11 -05:00

release-amd64.yaml

security: ci: fix template injection

2025-06-26 12:29:11 -05:00

release-arm64.yaml

security: ci: fix template injection

2025-06-26 12:29:11 -05:00

release-ppc64le.yaml

security: ci: fix template injection

2025-06-26 12:29:11 -05:00

release-s390x.yaml

security: ci: fix template injection

2025-06-26 12:29:11 -05:00

release.yaml

security: ci: fix template injection

2025-06-26 12:29:11 -05:00

run-cri-containerd-tests.yaml

workflows: Pin action hashes

2025-06-21 08:14:13 +01:00

run-k8s-tests-on-aks.yaml

workflows: adopting azure/setup-kubectl

2025-07-08 15:15:54 -03:00

run-k8s-tests-on-amd64.yaml

tests: k0s: Always use latest version, apart from CRI-O tests

2025-07-09 13:27:18 +02:00

run-k8s-tests-on-arm64.yaml

workflows: Pin action hashes

2025-06-21 08:14:13 +01:00

run-k8s-tests-on-ppc64le.yaml

workflows: Pin action hashes

2025-06-21 08:14:13 +01:00

run-k8s-tests-on-zvsi.yaml

workflows: Pin action hashes

2025-06-21 08:14:13 +01:00

run-kata-coco-stability-tests.yaml

workflows: adopting azure/setup-kubectl

2025-07-08 15:15:54 -03:00

run-kata-coco-tests.yaml

Merge pull request #11380 from arvindskumar99/sev-deprecation

2025-07-09 11:38:13 +01:00

run-kata-deploy-tests-on-aks.yaml

workflows: adopting azure/setup-kubectl

2025-07-08 15:15:54 -03:00

run-kata-deploy-tests.yaml

workflows: Pin action hashes

2025-06-21 08:14:13 +01:00

run-kata-monitor-tests.yaml

workflows: Pin action hashes

2025-06-21 08:14:13 +01:00

run-metrics.yaml

workflows: Pin action hashes

2025-06-21 08:14:13 +01:00

run-runk-tests.yaml

workflows: Pin action hashes

2025-06-21 08:14:13 +01:00

scorecard.yaml

workflows: Add scorecard workflow

2025-06-23 16:09:14 +01:00

shellcheck_required.yaml

workflows: Pin action hashes

2025-06-21 08:14:13 +01:00

shellcheck.yaml

workflows: Pin action hashes

2025-06-21 08:14:13 +01:00

stale.yaml

workflows: Pin action hashes

2025-06-21 08:14:13 +01:00

static-checks-self-hosted.yaml

workflow: Add top-level permissions

2025-05-28 19:34:28 +01:00

static-checks.yaml

Merge pull request #11424 from katexochen/p/regorus-oras-cache

2025-06-24 14:49:00 -07:00

zizmor.yaml

security: gha: Use Zizomor's auditor mode

2025-09-11 08:45:13 -05:00