zizmor 1.4.0__tar.gz → 1.4.1__tar.gz

{zizmor-1.4.0 → zizmor-1.4.1}/.github/workflows/docker.yml

@@ -73,6 +73,8 @@ jobs:
           platforms: ${{ matrix.image.platform }}
           labels: ${{ steps.docker-metadata.outputs.labels }}
           outputs: type=image,"name=${{ env.ZIZMOR_IMAGE }}",push-by-digest=true,name-canonical=true,push=true
+          build-args: |
+            ZIZMOR_VERSION=${{ github.event.inputs.version }}
 
       - name: Export digest
         run: |

{zizmor-1.4.0 → zizmor-1.4.1}/Cargo.lock

@@ -3151,7 +3151,7 @@ dependencies = [
 
 [[package]]
 name = "zizmor"
-version = "1.4.0"
+version = "1.4.1"
 dependencies = [
  "annotate-snippets",
  "anstream",

{zizmor-1.4.0 → zizmor-1.4.1}/Cargo.toml

@@ -1,7 +1,7 @@
 [package]
 name = "zizmor"
 description = "Static analysis for GitHub Actions"
-version = "1.4.0"
+version = "1.4.1"
 edition = "2021"
 repository = "https://github.com/woodruffw/zizmor"
 homepage = "https://github.com/woodruffw/zizmor"

{zizmor-1.4.0 → zizmor-1.4.1}/Dockerfile

@@ -14,7 +14,7 @@ RUN set -eux && \
     apt-get clean && \
     rm -rf /var/lib/apt/lists/*
 
-RUN pip install zizmor && \
+RUN pip install zizmor==${ZIZMOR_VERSION} && \
     which zizmor
 
 # ------------------------------------------------------------------------------

{zizmor-1.4.0 → zizmor-1.4.1}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: zizmor
-Version: 1.4.0
+Version: 1.4.1
 License-File: LICENSE
 Summary: Static analysis for GitHub Actions
 Keywords: cli,github-actions,static-analysis,security

{zizmor-1.4.0 → zizmor-1.4.1}/docs/release-notes.md

@@ -9,6 +9,15 @@ of `zizmor`.
 
 ## Next (UNRELEASED)
 
+## v1.4.1
+
+This is a small corrective release for v1.4.0.
+
+### Bug Fixes 🐛
+
+* Findings produced by ([unredacted-secrets]) now use the correct ID and
+  link to the correct URL in the audit documentation (#566)
+
 ## v1.4.0
 
 This release comes with one new audit ([unredacted-secrets]), plus a handful

{zizmor-1.4.0 → zizmor-1.4.1}/docs/usage.md

@@ -463,7 +463,7 @@ To do so, add the following to your `.pre-commit-config.yaml` `repos` section:
 
 ```yaml
 - repo: https://github.com/woodruffw/zizmor-pre-commit
-  rev: v1.4.0 # (1)!
+  rev: v1.4.1 # (1)!
   hooks:
   - id: zizmor
 ```

{zizmor-1.4.0 → zizmor-1.4.1}/src/audit/unredacted_secrets.rs

@@ -9,7 +9,11 @@ use super::{audit_meta, Audit};
 
 pub(crate) struct UnredactedSecrets;
 
-audit_meta!(UnredactedSecrets, "secret-leakage", "leaked secret values");
+audit_meta!(
+    UnredactedSecrets,
+    "unredacted-secrets",
+    "leaked secret values"
+);
 
 impl Audit for UnredactedSecrets {
     fn new(_: crate::AuditState) -> anyhow::Result<Self>

{zizmor-1.4.0 → zizmor-1.4.1}/tests/snapshots/snapshot__unredacted_secrets.snap

@@ -1,9 +1,8 @@
 ---
 source: tests/snapshot.rs
 expression: "zizmor().workflow(workflow_under_test(\"unredacted-secrets.yml\")).run()?"
-snapshot_kind: text
 ---
-warning[secret-leakage]: leaked secret values
+warning[unredacted-secrets]: leaked secret values
   --> @@INPUT@@:14:18
    |
 14 |           stuff: ${{ fromJSON(secrets.password) }}
@@ -11,7 +10,7 @@ warning[secret-leakage]: leaked secret values
    |
    = note: audit confidence → High
 
-warning[secret-leakage]: leaked secret values
+warning[unredacted-secrets]: leaked secret values
   --> @@INPUT@@:17:23
    |
 17 |           otherstuff: ${{ fromJson(secrets.otherstuff).field }}