Skip to content

Initial attempt at a Checks API integration - #172

Draft
woodruffw wants to merge 9 commits into
mainfrom
ww/checks
Draft

Initial attempt at a Checks API integration#172
woodruffw wants to merge 9 commits into
mainfrom
ww/checks

README: cleanup

b123cfa
Select commit
Loading
Failed to load commit list.
Sign in for the full log view
GitHub Actions / zizmor selftest (xfail) failed Oct 4, 2026 in 2s

51 findings

51 findings

Severity Count
High 51

View workflow run and logs

Details

Severity Rule Location Finding
High template-injection test/assets/checks-findings.yml:9 code injection via template expansion
High template-injection test/assets/checks-findings.yml:10 code injection via template expansion
High template-injection test/assets/checks-findings.yml:11 code injection via template expansion
High template-injection test/assets/checks-findings.yml:12 code injection via template expansion
High template-injection test/assets/checks-findings.yml:13 code injection via template expansion
High template-injection test/assets/checks-findings.yml:14 code injection via template expansion
High template-injection test/assets/checks-findings.yml:15 code injection via template expansion
High template-injection test/assets/checks-findings.yml:16 code injection via template expansion
High template-injection test/assets/checks-findings.yml:17 code injection via template expansion
High template-injection test/assets/checks-findings.yml:18 code injection via template expansion
High template-injection test/assets/checks-findings.yml:19 code injection via template expansion
High template-injection test/assets/checks-findings.yml:20 code injection via template expansion
High template-injection test/assets/checks-findings.yml:21 code injection via template expansion
High template-injection test/assets/checks-findings.yml:22 code injection via template expansion
High template-injection test/assets/checks-findings.yml:23 code injection via template expansion
High template-injection test/assets/checks-findings.yml:24 code injection via template expansion
High template-injection test/assets/checks-findings.yml:25 code injection via template expansion
High template-injection test/assets/checks-findings.yml:26 code injection via template expansion
High template-injection test/assets/checks-findings.yml:27 code injection via template expansion
High template-injection test/assets/checks-findings.yml:28 code injection via template expansion
High template-injection test/assets/checks-findings.yml:29 code injection via template expansion
High template-injection test/assets/checks-findings.yml:30 code injection via template expansion
High template-injection test/assets/checks-findings.yml:31 code injection via template expansion
High template-injection test/assets/checks-findings.yml:32 code injection via template expansion
High template-injection test/assets/checks-findings.yml:33 code injection via template expansion
High template-injection test/assets/checks-findings.yml:34 code injection via template expansion
High template-injection test/assets/checks-findings.yml:35 code injection via template expansion
High template-injection test/assets/checks-findings.yml:36 code injection via template expansion
High template-injection test/assets/checks-findings.yml:37 code injection via template expansion
High template-injection test/assets/checks-findings.yml:38 code injection via template expansion
High template-injection test/assets/checks-findings.yml:39 code injection via template expansion
High template-injection test/assets/checks-findings.yml:40 code injection via template expansion
High template-injection test/assets/checks-findings.yml:41 code injection via template expansion
High template-injection test/assets/checks-findings.yml:42 code injection via template expansion
High template-injection test/assets/checks-findings.yml:43 code injection via template expansion
High template-injection test/assets/checks-findings.yml:44 code injection via template expansion
High template-injection test/assets/checks-findings.yml:45 code injection via template expansion
High template-injection test/assets/checks-findings.yml:46 code injection via template expansion
High template-injection test/assets/checks-findings.yml:47 code injection via template expansion
High template-injection test/assets/checks-findings.yml:48 code injection via template expansion
High template-injection test/assets/checks-findings.yml:49 code injection via template expansion
High template-injection test/assets/checks-findings.yml:50 code injection via template expansion
High template-injection test/assets/checks-findings.yml:51 code injection via template expansion
High template-injection test/assets/checks-findings.yml:52 code injection via template expansion
High template-injection test/assets/checks-findings.yml:53 code injection via template expansion
High template-injection test/assets/checks-findings.yml:54 code injection via template expansion
High template-injection test/assets/checks-findings.yml:55 code injection via template expansion
High template-injection test/assets/checks-findings.yml:56 code injection via template expansion
High template-injection test/assets/checks-findings.yml:57 code injection via template expansion
High template-injection test/assets/checks-findings.yml:58 code injection via template expansion

Showing 50 of 51 findings. See the annotations and workflow log for the remaining findings.

Annotations

Check failure on line 9 in test/assets/checks-findings.yml

See this annotation in the file changed.

@github-actions github-actions / zizmor selftest (xfail)

High: template-injection 

code injection via template expansion

may expand into attacker-controllable code

Documentation: https://docs.zizmor.sh/audits/#template-injection

Check failure on line 10 in test/assets/checks-findings.yml

See this annotation in the file changed.

@github-actions github-actions / zizmor selftest (xfail)

High: template-injection 

code injection via template expansion

may expand into attacker-controllable code

Documentation: https://docs.zizmor.sh/audits/#template-injection

Check failure on line 11 in test/assets/checks-findings.yml

See this annotation in the file changed.

@github-actions github-actions / zizmor selftest (xfail)

High: template-injection 

code injection via template expansion

may expand into attacker-controllable code

Documentation: https://docs.zizmor.sh/audits/#template-injection

Check failure on line 12 in test/assets/checks-findings.yml

See this annotation in the file changed.

@github-actions github-actions / zizmor selftest (xfail)

High: template-injection 

code injection via template expansion

may expand into attacker-controllable code

Documentation: https://docs.zizmor.sh/audits/#template-injection

Check failure on line 13 in test/assets/checks-findings.yml

See this annotation in the file changed.

@github-actions github-actions / zizmor selftest (xfail)

High: template-injection 

code injection via template expansion

may expand into attacker-controllable code

Documentation: https://docs.zizmor.sh/audits/#template-injection

Check failure on line 14 in test/assets/checks-findings.yml

See this annotation in the file changed.

@github-actions github-actions / zizmor selftest (xfail)

High: template-injection 

code injection via template expansion

may expand into attacker-controllable code

Documentation: https://docs.zizmor.sh/audits/#template-injection

Check failure on line 15 in test/assets/checks-findings.yml

See this annotation in the file changed.

@github-actions github-actions / zizmor selftest (xfail)

High: template-injection 

code injection via template expansion

may expand into attacker-controllable code

Documentation: https://docs.zizmor.sh/audits/#template-injection

Check failure on line 16 in test/assets/checks-findings.yml

See this annotation in the file changed.

@github-actions github-actions / zizmor selftest (xfail)

High: template-injection 

code injection via template expansion

may expand into attacker-controllable code

Documentation: https://docs.zizmor.sh/audits/#template-injection

Check failure on line 17 in test/assets/checks-findings.yml

See this annotation in the file changed.

@github-actions github-actions / zizmor selftest (xfail)

High: template-injection 

code injection via template expansion

may expand into attacker-controllable code

Documentation: https://docs.zizmor.sh/audits/#template-injection

Check failure on line 18 in test/assets/checks-findings.yml

See this annotation in the file changed.

@github-actions github-actions / zizmor selftest (xfail)

High: template-injection 

code injection via template expansion

may expand into attacker-controllable code

Documentation: https://docs.zizmor.sh/audits/#template-injection

Check failure on line 19 in test/assets/checks-findings.yml

See this annotation in the file changed.

@github-actions github-actions / zizmor selftest (xfail)

High: template-injection 

code injection via template expansion

may expand into attacker-controllable code

Documentation: https://docs.zizmor.sh/audits/#template-injection

Check failure on line 20 in test/assets/checks-findings.yml

See this annotation in the file changed.

@github-actions github-actions / zizmor selftest (xfail)

High: template-injection 

code injection via template expansion

may expand into attacker-controllable code

Documentation: https://docs.zizmor.sh/audits/#template-injection

Check failure on line 21 in test/assets/checks-findings.yml

See this annotation in the file changed.

@github-actions github-actions / zizmor selftest (xfail)

High: template-injection 

code injection via template expansion

may expand into attacker-controllable code

Documentation: https://docs.zizmor.sh/audits/#template-injection

Check failure on line 22 in test/assets/checks-findings.yml

See this annotation in the file changed.

@github-actions github-actions / zizmor selftest (xfail)

High: template-injection 

code injection via template expansion

may expand into attacker-controllable code

Documentation: https://docs.zizmor.sh/audits/#template-injection

Check failure on line 23 in test/assets/checks-findings.yml

See this annotation in the file changed.

@github-actions github-actions / zizmor selftest (xfail)

High: template-injection 

code injection via template expansion

may expand into attacker-controllable code

Documentation: https://docs.zizmor.sh/audits/#template-injection

Check failure on line 24 in test/assets/checks-findings.yml

See this annotation in the file changed.

@github-actions github-actions / zizmor selftest (xfail)

High: template-injection 

code injection via template expansion

may expand into attacker-controllable code

Documentation: https://docs.zizmor.sh/audits/#template-injection

Check failure on line 25 in test/assets/checks-findings.yml

See this annotation in the file changed.

@github-actions github-actions / zizmor selftest (xfail)

High: template-injection 

code injection via template expansion

may expand into attacker-controllable code

Documentation: https://docs.zizmor.sh/audits/#template-injection

Check failure on line 26 in test/assets/checks-findings.yml

See this annotation in the file changed.

@github-actions github-actions / zizmor selftest (xfail)

High: template-injection 

code injection via template expansion

may expand into attacker-controllable code

Documentation: https://docs.zizmor.sh/audits/#template-injection

Check failure on line 27 in test/assets/checks-findings.yml

See this annotation in the file changed.

@github-actions github-actions / zizmor selftest (xfail)

High: template-injection 

code injection via template expansion

may expand into attacker-controllable code

Documentation: https://docs.zizmor.sh/audits/#template-injection

Check failure on line 28 in test/assets/checks-findings.yml

See this annotation in the file changed.

@github-actions github-actions / zizmor selftest (xfail)

High: template-injection 

code injection via template expansion

may expand into attacker-controllable code

Documentation: https://docs.zizmor.sh/audits/#template-injection

Check failure on line 29 in test/assets/checks-findings.yml

See this annotation in the file changed.

@github-actions github-actions / zizmor selftest (xfail)

High: template-injection 

code injection via template expansion

may expand into attacker-controllable code

Documentation: https://docs.zizmor.sh/audits/#template-injection

Check failure on line 30 in test/assets/checks-findings.yml

See this annotation in the file changed.

@github-actions github-actions / zizmor selftest (xfail)

High: template-injection 

code injection via template expansion

may expand into attacker-controllable code

Documentation: https://docs.zizmor.sh/audits/#template-injection

Check failure on line 31 in test/assets/checks-findings.yml

See this annotation in the file changed.

@github-actions github-actions / zizmor selftest (xfail)

High: template-injection 

code injection via template expansion

may expand into attacker-controllable code

Documentation: https://docs.zizmor.sh/audits/#template-injection

Check failure on line 32 in test/assets/checks-findings.yml

See this annotation in the file changed.

@github-actions github-actions / zizmor selftest (xfail)

High: template-injection 

code injection via template expansion

may expand into attacker-controllable code

Documentation: https://docs.zizmor.sh/audits/#template-injection

Check failure on line 33 in test/assets/checks-findings.yml

See this annotation in the file changed.

@github-actions github-actions / zizmor selftest (xfail)

High: template-injection 

code injection via template expansion

may expand into attacker-controllable code

Documentation: https://docs.zizmor.sh/audits/#template-injection
View more details on GitHub Actions