Repository navigation
ci: Resolve all zizmor findings as of zizmor@1.31.1 - #157
hashcatHitman wants to merge 13 commits into
Conversation
See: https://github.com/actions/checkout/releases/tag/v7.0.1 This is the same version we're already implicitly using. Signed-off-by: hashcatHitman <155700084+hashcatHitman@users.noreply.github.com>
See: https://github.com/actions/cache/releases/tag/v6.1.0 This is the same version we're already implicitly using. Signed-off-by: hashcatHitman <155700084+hashcatHitman@users.noreply.github.com>
Signed-off-by: hashcatHitman <155700084+hashcatHitman@users.noreply.github.com>
Signed-off-by: hashcatHitman <155700084+hashcatHitman@users.noreply.github.com>
Signed-off-by: hashcatHitman <155700084+hashcatHitman@users.noreply.github.com>
Signed-off-by: hashcatHitman <155700084+hashcatHitman@users.noreply.github.com>
Signed-off-by: hashcatHitman <155700084+hashcatHitman@users.noreply.github.com>
Signed-off-by: hashcatHitman <155700084+hashcatHitman@users.noreply.github.com>
Signed-off-by: hashcatHitman <155700084+hashcatHitman@users.noreply.github.com>
Signed-off-by: hashcatHitman <155700084+hashcatHitman@users.noreply.github.com>
Signed-off-by: hashcatHitman <155700084+hashcatHitman@users.noreply.github.com>
Signed-off-by: hashcatHitman <155700084+hashcatHitman@users.noreply.github.com>
|
The four failing tests are from changes I didn't make, but I'll see if I can fix them anyway. Since the runner logs will only be around for so long, I'll record that they were failing like so: $ rustup install ${env:RUSTUP_TOOLCHAIN} --profile minimal
error: toolchain 'nightly-i686-pc-windows-gnu' may not be able to run on this system
note: to build software for that platform, try `rustup target add i686-pc-windows-gnu` instead
note: add the `--force-non-host` flag to install the toolchain anyway |
These were failing with the message:
```console
$ rustup install ${env:RUSTUP_TOOLCHAIN} --profile minimal
error: toolchain 'nightly-i686-pc-windows-gnu' may not be able to run on this system
note: to build software for that platform, try `rustup target add i686-pc-windows-gnu` instead
note: add the `--force-non-host` flag to install the toolchain anyway
```
Maybe it's really just that easy?
Signed-off-by: hashcatHitman <155700084+hashcatHitman@users.noreply.github.com>
|
Hmmm, it isn't that easy. It looks like |
|
r? crabwatch |
|
Ok, no r? in this repo. I'll flip a coin. Heads=Marco. |
$ fend d2
1: 50.00% ##############################
2: 50.00% ##############################
$ fend roll 1d2
1Looks like you won, @marcoieni! |
I don't know how applicable it is to this repository but my solution for backtrace was to use an x86_64 host and then |
In pursuit of getting more
zizmorlints enforced acrossrust-langrepos throughcrabwatch, this PR fixes allzizmorfindings as ofzizmor@1.31.1, using theauditorpersona. The lints that actually fired per-persona level are:regularpersona findings:artipackedtemplate-injectionunpinned-usespedanticpersona findings:regulartemplate-injectionauditorpersona findings:pedanticThe hash pin format is supported by tools like Dependabot and Renovate, which can update the pinned hashes and their associated comments. If you'd like help setting either of those up, let me know which you prefer, and if you'd like it in this PR or a new one. By default, I'd assume to set it up to only update GitHub Actions.