Skip to content

feat(ci): zizmor github actions vuln scanner#5368

Merged
Skarlso merged 3 commits intoexternal-secrets:mainfrom
arielrahamim:zizmor-action-scanning
Sep 26, 2025
Merged

feat(ci): zizmor github actions vuln scanner#5368
Skarlso merged 3 commits intoexternal-secrets:mainfrom
arielrahamim:zizmor-action-scanning

Conversation

@arielrahamim
Copy link
Copy Markdown
Contributor

@arielrahamim arielrahamim commented Sep 24, 2025 •
edited
Loading

Problem Statement

What is the problem you're trying to solve?

Adding Zizmor to scan github actions workflows

Related Issue

#4676

Fixes #...

Proposed Changes

How do you like to solve the issue and why?

Format

Please ensure that your PR follows the following format for the title:

feat(scope): add new feature
fix(scope): fix bug
docs(scope): update documentation
chore(scope): update build tool or dependencies
ref(scope): refactor code
clean(scope): provider cleanup
test(scope): add tests
perf(scope): improve performance
desig(scope): improve design

Where scope is optionally one of:

  • charts
  • release
  • testing
  • security
  • templating

Checklist

  • I have read the contribution guidelines
  • All commits are signed with git commit --signoff
  • My changes have reasonable test coverage
  • All tests pass with make test
  • I ensured my PR is ready for review with make reviewable

@github-actions github-actions bot added area/ci Pull requests that update Github_actions code kind/feature Categorizes issue or PR as related to a new feature. size/s component/github-actions and removed size/s labels Sep 24, 2025
@arielrahamim arielrahamim mentioned this pull request Sep 24, 2025
Closed
@arielrahamim
zizmor-action-scanning
5a3fe15 
Signed-off-by: arielrahamim <ariel@projectcircle.co.il>
@arielrahamim
WIP
39de70a 
Signed-off-by: arielrahamim <ariel@projectcircle.co.il>
@Skarlso
Copy link
Copy Markdown
Contributor

Skarlso commented Sep 26, 2025

@arielrahamim Can you please sign your commit? :)

@arielrahamim
Copy link
Copy Markdown
Contributor Author

arielrahamim commented Sep 26, 2025

@arielrahamim Can you please sign your commit? :)

Done! New to signing and verified commits haha

@github-advanced-security
Copy link
Copy Markdown

github-advanced-security bot commented Sep 26, 2025

This pull request sets up GitHub code scanning for this repository. Once the scans have completed and the checks have passed, the analysis results for this pull request branch will appear on this overview. Once you merge this pull request, the 'Security' tab will show more code scanning analysis results (for example, for the default branch). Depending on your configuration and choice of analysis tool, future pull requests will be annotated with code scanning analysis results. For more information about GitHub code scanning, check out the documentation.

@sonarqubecloud
Copy link
Copy Markdown

sonarqubecloud bot commented Sep 26, 2025

Quality Gate Passed Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

@Skarlso Skarlso merged commit be6f1f7 into external-secrets:main Sep 26, 2025
30 checks passed
SamuelMolling pushed a commit to SamuelMolling/external-secrets that referenced this pull request Oct 24, 2025
@arielrahamim @Skarlso @SamuelMolling
feat(ci): zizmor github actions vuln scanner (external-secrets#5368)
f175995 
* zizmor-action-scanning

Signed-off-by: arielrahamim <ariel@projectcircle.co.il>

* WIP

Signed-off-by: arielrahamim <ariel@projectcircle.co.il>

---------

Signed-off-by: arielrahamim <ariel@projectcircle.co.il>
Co-authored-by: Gergely Brautigam <skarlso777@gmail.com>
Signed-off-by: Samuel Molling <samuelmolling@gmail.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@Skarlso Skarlso Skarlso approved these changes

Assignees

No one assigned

Labels

area/ci Pull requests that update Github_actions code component/github-actions kind/feature Categorizes issue or PR as related to a new feature. size/s

Projects

External Secrets
Status: Done

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

3 participants

@arielrahamim @Skarlso @github-advanced-security