mirror of
https://github.com/qbittorrent/qBittorrent.git
synced 2025-12-19 23:17:21 -06:00
GHA CI: update zizmor rules ID
zizmor 1.7.0 has changed the ID. https://docs.zizmor.sh/release-notes/#v170 PR #22684.
This commit is contained in:
10
.github/workflows/ci_file_health.yaml
vendored
10
.github/workflows/ci_file_health.yaml
vendored
@@ -52,13 +52,13 @@ jobs:
|
|||||||
GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
|
GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
|
||||||
run: |
|
run: |
|
||||||
pip install zizmor
|
pip install zizmor
|
||||||
IGNORE_RULEID='(.ruleId != "template-injection")
|
IGNORE_RULEID='(.ruleId != "zizmor/template-injection")
|
||||||
and (.ruleId != "unpinned-uses")'
|
and (.ruleId != "zizmor/unpinned-uses")'
|
||||||
IGNORE_ID='(.id != "template-injection")
|
IGNORE_ID='(.id != "zizmor/template-injection")
|
||||||
and (.id != "unpinned-uses")'
|
and (.id != "zizmor/unpinned-uses")'
|
||||||
zizmor \
|
zizmor \
|
||||||
--format sarif \
|
--format sarif \
|
||||||
--pedantic \
|
--persona auditor \
|
||||||
./ \
|
./ \
|
||||||
| jq "(.runs[].results |= map(select($IGNORE_RULEID)))
|
| jq "(.runs[].results |= map(select($IGNORE_RULEID)))
|
||||||
| (.runs[].tool.driver.rules |= map(select($IGNORE_ID)))" \
|
| (.runs[].tool.driver.rules |= map(select($IGNORE_ID)))" \
|
||||||
|
|||||||
Reference in New Issue
Block a user