Skip to content

chore(deps): update github actions (major) #29

chore(deps): update github actions (major)

chore(deps): update github actions (major) #29

Triggered via pull request August 5, 2026 20:14
Status Failure
Total duration 59s
Artifacts 2

github_actions_scan.yml Required

on: pull_request_target
check-changes
5s
check-changes
zizmor-config
10s
zizmor-config
zizmor-scan
13s
zizmor-scan
zizmor-output
15s
zizmor-output
zizmor-upload
4s
zizmor-upload
Fit to window
Zoom out
Zoom in

Annotations

3 errors and 7 warnings
zizmor-output
Process completed with exit code 1.
dangerous-triggers: .github/workflows/skills-validate.yml#L17
skills-validate.yml:17: use of fundamentally insecure workflow trigger: pull_request_target is almost always used insecurely
dangerous-triggers: .github/workflows/assign-prs.yml#L17
assign-prs.yml:17: use of fundamentally insecure workflow trigger: pull_request_target is almost always used insecurely
zizmor-config
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: google-github-actions/auth@c200f3691d83b41bf9bbd8638997a462592937ed. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
zizmor-upload
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: google-github-actions/auth@c200f3691d83b41bf9bbd8638997a462592937ed. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
excessive-permissions: .github/workflows/skills-validate.yml#L30
skills-validate.yml:30: overly broad permissions: default permissions used due to no permissions: block
excessive-permissions: .github/workflows/presubmit-tests.yml#L21
presubmit-tests.yml:21: overly broad permissions: default permissions used due to no permissions: block
excessive-permissions: .github/workflows/markdown-checks.yml#L22
markdown-checks.yml:22: overly broad permissions: default permissions used due to no permissions: block
excessive-permissions: .github/workflows/json-lint.yml#L22
json-lint.yml:22: overly broad permissions: default permissions used due to no permissions: block
excessive-permissions: .github/workflows/header-check.yml#L22
header-check.yml:22: overly broad permissions: default permissions used due to no permissions: block

Artifacts

Produced during runtime
Name Size Digest
zizmor Expired
4.29 KB
sha256:37b648904aa57a67f8da8f3c159b019aec71a2eeb9199cd72a17156d3a02e5b5
zizmor-config Expired
342 Bytes
sha256:8c7ec127e6cab47743288f7feb2188a3a5b3b416c205927cafddc027495bddad