stevenhorsman 926a633cbd ci: add explanatory comments to workflow permissions ...

In 7afdfc7388 we
just disabled the undocumented-permissions zizmor warning,
but now with AI we can roll this fix more easily, so remove
the disabling of the rule and add the comments

Generated-By: IBM Bob
Signed-off-by: stevenhorsman <steven@uk.ibm.com>

2026-07-01 11:43:21 +01:00

..

actionlint.yaml

gha: Pin actionlint version

2026-03-31 10:51:17 -05:00

basic-ci-amd64.yaml

ci: Add qemu-runtime-rs and clh-runtime-rs test with nydus

2026-06-11 21:42:48 +02:00

basic-ci-s390x.yaml

versions: bump containerd to 2.3 and define minimum/latest test matrix

2026-06-08 19:20:14 +02:00

build-checks-preview-riscv64.yaml

build-checks: Remove make vendor

2026-05-06 09:49:50 +02:00

build-checks.yaml

kata-types: Add dmverity module with optional devicemapper support

2026-06-26 09:51:05 +08:00

build-kata-static-tarball-amd64.yaml

ci: add explanatory comments to workflow permissions

2026-07-01 11:43:21 +01:00

build-kata-static-tarball-arm64.yaml

ci: add explanatory comments to workflow permissions

2026-07-01 11:43:21 +01:00

build-kata-static-tarball-ppc64le.yaml

ci: add explanatory comments to workflow permissions

2026-07-01 11:43:21 +01:00

build-kata-static-tarball-riscv64.yaml

ci: add explanatory comments to workflow permissions

2026-07-01 11:43:21 +01:00

build-kata-static-tarball-s390x.yaml

ci: add explanatory comments to workflow permissions

2026-07-01 11:43:21 +01:00

build-kubectl-image.yaml

ci: add explanatory comments to workflow permissions

2026-07-01 11:43:21 +01:00

cargo-deny.yaml

workflow: Update cargo deny check

2026-04-11 08:46:32 +01:00

ci-devel.yaml

ci: add explanatory comments to workflow permissions

2026-07-01 11:43:21 +01:00

ci-nightly-riscv.yaml

ci: add explanatory comments to workflow permissions

2026-07-01 11:43:21 +01:00

ci-nightly-s390x.yaml

workflows: Add concurrency limits

2026-04-28 13:10:36 +01:00

ci-nightly.yaml

ci: add explanatory comments to workflow permissions

2026-07-01 11:43:21 +01:00

ci-on-push.yaml

ci: add explanatory comments to workflow permissions

2026-07-01 11:43:21 +01:00

ci.yaml

ci: add explanatory comments to workflow permissions

2026-07-01 11:43:21 +01:00

cleanup-resources.yaml

workflows: Add concurrency limits

2026-04-28 13:10:36 +01:00

codeql.yml

ci: add explanatory comments to workflow permissions

2026-07-01 11:43:21 +01:00

commit-message-check.yaml

ci: security: Fix "commit hash does not point to a Git tag"

2025-09-08 11:17:54 -05:00

create-auth-registry-image.yaml

workflows: Add concurrency limits

2026-04-28 13:10:36 +01:00

darwin-tests.yaml

workflows: Update actions/checkout version

2026-03-30 10:45:28 +01:00

docs.yaml

ci: add explanatory comments to workflow permissions

2026-07-01 11:43:21 +01:00

editorconfig-checker.yaml

build(deps): bump editorconfig-checker/action-editorconfig-checker

2026-05-01 18:05:35 +00:00

gatekeeper-skipper.yaml

workflows: Add concurrency limits

2026-04-28 13:10:36 +01:00

gatekeeper.yaml

ci: add explanatory comments to workflow permissions

2026-07-01 11:43:21 +01:00

govulncheck.yaml

build(deps): bump actions/checkout from 4.2.2 to 6.0.2

2026-05-04 17:05:59 +00:00

osv-scanner-pr.yaml

workflows: refactor osv-scanner workflows

2026-06-09 13:38:17 +01:00

osv-scanner-scheduled.yaml

workflows: refactor osv-scanner workflows

2026-06-09 13:38:17 +01:00

payload-after-push.yaml

ci: add explanatory comments to workflow permissions

2026-07-01 11:43:21 +01:00

PR-wip-checks.yaml

build(deps): bump tim-actions/wip-check from 1.0.0 to 1.1.0

2026-04-16 10:48:41 +00:00

publish-kata-images.yaml

ci: add explanatory comments to workflow permissions

2026-07-01 11:43:21 +01:00

push-oras-tarball-cache.yaml

ci: add explanatory comments to workflow permissions

2026-07-01 11:43:21 +01:00

release-amd64.yaml

ci: add explanatory comments to workflow permissions

2026-07-01 11:43:21 +01:00

release-arm64.yaml

ci: add explanatory comments to workflow permissions

2026-07-01 11:43:21 +01:00

release-kata-images.yaml

ci: add explanatory comments to workflow permissions

2026-07-01 11:43:21 +01:00

release-ppc64le.yaml

ci: add explanatory comments to workflow permissions

2026-07-01 11:43:21 +01:00

release-s390x.yaml

ci: add explanatory comments to workflow permissions

2026-07-01 11:43:21 +01:00

release.yaml

ci: add explanatory comments to workflow permissions

2026-07-01 11:43:21 +01:00

run-cri-containerd-tests.yaml

workflows: Add concurrency limits

2026-04-28 13:10:36 +01:00

run-k8s-tests-on-aks.yaml

ci: target Azure CLH runtimes directly in AKS tests

2026-05-28 23:32:37 +02:00

run-k8s-tests-on-arm64.yaml

workflows: Add concurrency limits

2026-04-28 13:10:36 +01:00

run-k8s-tests-on-free-runner.yaml

ci: Introduce tests for VM template factory

2026-06-19 18:00:02 +00:00

run-k8s-tests-on-nvidia-gpu.yaml

tests: temporarily disable nvidia-gpu-snp* tests

2026-07-01 12:25:02 +02:00

run-k8s-tests-on-ppc64le.yaml

workflows: Add concurrency limits

2026-04-28 13:10:36 +01:00

run-k8s-tests-on-zvsi.yaml

GHA: Run qemu-coco-dev-runtime-rs k8s test on zVSI nightly only

2026-06-11 13:10:09 +02:00

run-kata-coco-tests-arm64-k8s.yaml

workflows: Add concurrency limits

2026-04-28 13:10:36 +01:00

run-kata-coco-tests.yaml

tests: Add E2E test for erofs dm-verity integrity in CI tests

2026-06-26 09:51:05 +08:00

run-kata-deploy-tests.yaml

workflows: Add concurrency limits

2026-04-28 13:10:36 +01:00

run-kata-monitor-k8s-tests.yaml

tests: align kata-monitor containerd version selector

2026-06-09 21:25:45 +02:00

run-kata-monitor-tests.yaml

tests: align kata-monitor containerd version selector

2026-06-09 21:25:45 +02:00

scorecard.yaml

ci: add explanatory comments to workflow permissions

2026-07-01 11:43:21 +01:00

shellcheck_required.yaml

ci: Bump shellcheck severity to style

2026-04-24 08:14:08 +02:00

spellcheck.yaml

build(deps): bump streetsidesoftware/cspell-action from 8.3.0 to 8.4.0

2026-05-01 18:06:22 +00:00

stale_issues.yaml

ci: correct environment variable syntax in stale issues workflow

2026-05-11 09:31:36 +01:00

stale.yaml

workflow: Bump stale action version

2026-04-14 16:25:35 +01:00

static-checks-self-hosted.yaml

gha: move static checks to self hosted runners for ppc64le

2026-05-13 11:07:52 +01:00

static-checks.yaml

workflow: wire agent policy coverage check into static-checks

2026-06-29 10:49:26 +01:00

zizmor.yaml

workflows: Bump zizmor to 1.22

2026-04-28 13:10:36 +01:00