zizmor 1.8.0rc2__tar.gz → 1.10.0__tar.gz

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Potentially problematic release.


This version of zizmor might be problematic. Click here for more details.

Files changed (390) hide show
  1. {zizmor-1.8.0rc2 → zizmor-1.10.0}/Cargo.lock +139 -160
  2. {zizmor-1.8.0rc2 → zizmor-1.10.0}/Cargo.toml +27 -16
  3. {zizmor-1.8.0rc2 → zizmor-1.10.0}/PKG-INFO +30 -2
  4. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/github-actions-expressions/Cargo.toml +4 -1
  5. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/github-actions-expressions/src/context.rs +223 -85
  6. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/github-actions-expressions/src/expr.pest +2 -2
  7. zizmor-1.10.0/crates/github-actions-expressions/src/lib.rs +1390 -0
  8. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/github-actions-models/Cargo.toml +5 -1
  9. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/github-actions-models/src/action.rs +5 -5
  10. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/github-actions-models/src/common/expr.rs +15 -7
  11. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/github-actions-models/src/common.rs +59 -4
  12. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/github-actions-models/src/workflow/event.rs +25 -4
  13. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/github-actions-models/src/workflow/job.rs +7 -7
  14. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/github-actions-models/tests/sample-workflows/homebrew-core-dispatch-rebottle.yml +9 -9
  15. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/github-actions-models/tests/test_workflow.rs +0 -2
  16. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/yamlpath/Cargo.toml +5 -1
  17. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/yamlpath/src/lib.rs +404 -58
  18. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/yamlpath/tests/integration_test.rs +18 -6
  19. zizmor-1.10.0/crates/yamlpath/tests/testcases/exact-features.yml +88 -0
  20. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/yamlpath/tests/testcases/flow.yml +21 -2
  21. zizmor-1.10.0/crates/yamlpath/tests/testcases/key-only-features.yml +32 -0
  22. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/Cargo.toml +10 -2
  23. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/README.md +29 -1
  24. zizmor-1.10.0/crates/zizmor/build.rs +59 -0
  25. zizmor-1.10.0/crates/zizmor/data/codeql-injection-sinks.json +98 -0
  26. zizmor-1.10.0/crates/zizmor/data/context-capabilities.csv +4042 -0
  27. zizmor-1.10.0/crates/zizmor/src/audit/anonymous_definition.rs +65 -0
  28. zizmor-1.10.0/crates/zizmor/src/audit/artipacked.rs +359 -0
  29. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/src/audit/bot_conditions.rs +86 -38
  30. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/src/audit/cache_poisoning.rs +3 -1
  31. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/src/audit/dangerous_triggers.rs +1 -1
  32. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/src/audit/excessive_permissions.rs +3 -3
  33. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/src/audit/forbidden_uses.rs +1 -1
  34. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/src/audit/github_env.rs +2 -1
  35. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/src/audit/hardcoded_container_credentials.rs +2 -3
  36. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/src/audit/impostor_commit.rs +2 -2
  37. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/src/audit/insecure_commands.rs +10 -11
  38. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/src/audit/known_vulnerable_actions.rs +1 -1
  39. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/src/audit/mod.rs +9 -8
  40. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/src/audit/obfuscation.rs +40 -10
  41. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/src/audit/overprovisioned_secrets.rs +24 -14
  42. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/src/audit/ref_confusion.rs +3 -2
  43. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/src/audit/secrets_inherit.rs +4 -1
  44. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/src/audit/self_hosted_runner.rs +2 -3
  45. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/src/audit/stale_action_refs.rs +2 -2
  46. zizmor-1.10.0/crates/zizmor/src/audit/template_injection.rs +1098 -0
  47. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/src/audit/unpinned_images.rs +5 -2
  48. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/src/audit/unpinned_uses.rs +1 -1
  49. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/src/audit/unredacted_secrets.rs +9 -7
  50. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/src/audit/unsound_contains.rs +24 -15
  51. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/src/audit/use_trusted_publishing.rs +63 -54
  52. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/src/data/github-action.json +695 -695
  53. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/src/data/github-workflow.json +1742 -1715
  54. zizmor-1.10.0/crates/zizmor/src/finding/location.rs +690 -0
  55. zizmor-1.10.0/crates/zizmor/src/finding.rs +298 -0
  56. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/src/main.rs +108 -5
  57. zizmor-1.10.0/crates/zizmor/src/models/action.rs +233 -0
  58. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/src/models/coordinate.rs +75 -78
  59. zizmor-1.10.0/crates/zizmor/src/models/inputs.rs +40 -0
  60. zizmor-1.8.0rc2/crates/zizmor/src/models.rs → zizmor-1.10.0/crates/zizmor/src/models/workflow.rs +226 -369
  61. zizmor-1.10.0/crates/zizmor/src/models.rs +63 -0
  62. zizmor-1.10.0/crates/zizmor/src/output/fix.rs +141 -0
  63. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/src/output/github.rs +1 -4
  64. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/src/output/mod.rs +1 -0
  65. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/src/output/plain.rs +17 -2
  66. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/src/output/sarif.rs +16 -15
  67. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/src/registry.rs +34 -10
  68. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/src/utils.rs +392 -26
  69. zizmor-1.10.0/crates/zizmor/src/yaml_patch/mod.rs +3328 -0
  70. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/tests/integration/acceptance.rs +15 -0
  71. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/tests/integration/e2e.rs +30 -1
  72. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshot.rs +81 -0
  73. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__e2e__gha_hazmat.snap +158 -70
  74. zizmor-1.10.0/crates/zizmor/tests/integration/snapshots/integration__e2e__invalid_input_not_strict-2.snap +7 -0
  75. zizmor-1.10.0/crates/zizmor/tests/integration/snapshots/integration__e2e__invalid_input_not_strict.snap +7 -0
  76. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__e2e__invalid_inputs-10.snap +3 -4
  77. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__e2e__invalid_inputs-2.snap +3 -4
  78. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__e2e__invalid_inputs-3.snap +3 -4
  79. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__e2e__invalid_inputs-4.snap +3 -4
  80. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__e2e__invalid_inputs-5.snap +3 -4
  81. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__e2e__invalid_inputs-6.snap +3 -4
  82. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__e2e__invalid_inputs-7.snap +3 -4
  83. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__e2e__invalid_inputs-8.snap +3 -4
  84. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__e2e__invalid_inputs-9.snap +3 -4
  85. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__e2e__invalid_inputs.snap +3 -4
  86. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__e2e__issue_569.snap +4 -5
  87. zizmor-1.10.0/crates/zizmor/tests/integration/snapshots/integration__e2e__issue_612_repro.snap +5 -0
  88. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__e2e__issue_726.snap +2 -2
  89. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__e2e__menagerie-2.snap +1 -1
  90. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__e2e__menagerie.snap +1 -1
  91. zizmor-1.10.0/crates/zizmor/tests/integration/snapshots/integration__e2e__pr_960_backstop.snap +11 -0
  92. zizmor-1.10.0/crates/zizmor/tests/integration/snapshots/integration__snapshot__anonymous_definition-2.snap +28 -0
  93. zizmor-1.10.0/crates/zizmor/tests/integration/snapshots/integration__snapshot__anonymous_definition.snap +28 -0
  94. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__artipacked-2.snap +5 -4
  95. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__artipacked-3.snap +10 -8
  96. zizmor-1.10.0/crates/zizmor/tests/integration/snapshots/integration__snapshot__artipacked-4.snap +19 -0
  97. zizmor-1.10.0/crates/zizmor/tests/integration/snapshots/integration__snapshot__artipacked-5.snap +29 -0
  98. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__artipacked.snap +5 -4
  99. zizmor-1.10.0/crates/zizmor/tests/integration/snapshots/integration__snapshot__bot_conditions.snap +139 -0
  100. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__cache_poisoning-10.snap +6 -6
  101. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__cache_poisoning-11.snap +13 -13
  102. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__cache_poisoning-12.snap +4 -4
  103. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__cache_poisoning-13.snap +4 -4
  104. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__cache_poisoning-15.snap +8 -8
  105. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__cache_poisoning-2.snap +4 -4
  106. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__cache_poisoning-3.snap +6 -6
  107. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__cache_poisoning-4.snap +5 -5
  108. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__cache_poisoning-5.snap +6 -6
  109. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__cache_poisoning-6.snap +2 -2
  110. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__cache_poisoning-7.snap +2 -2
  111. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__cache_poisoning-8.snap +4 -4
  112. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__cache_poisoning-9.snap +6 -6
  113. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__excessive_permissions-10.snap +7 -7
  114. zizmor-1.10.0/crates/zizmor/tests/integration/snapshots/integration__snapshot__excessive_permissions-11.snap +19 -0
  115. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__excessive_permissions-12.snap +12 -11
  116. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__excessive_permissions-2.snap +3 -3
  117. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__excessive_permissions-3.snap +8 -8
  118. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__excessive_permissions-4.snap +3 -3
  119. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__excessive_permissions-5.snap +3 -3
  120. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__excessive_permissions-7.snap +19 -17
  121. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__excessive_permissions-8.snap +7 -7
  122. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__forbidden_uses-2.snap +7 -7
  123. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__forbidden_uses-3.snap +3 -3
  124. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__forbidden_uses-4.snap +5 -5
  125. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__forbidden_uses-5.snap +5 -6
  126. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__forbidden_uses-6.snap +3 -4
  127. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__github_env-2.snap +5 -5
  128. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__github_env-3.snap +5 -5
  129. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__github_output.snap +3 -2
  130. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__insecure_commands-2.snap +5 -5
  131. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__insecure_commands-3.snap +5 -5
  132. zizmor-1.10.0/crates/zizmor/tests/integration/snapshots/integration__snapshot__insecure_commands-4.snap +22 -0
  133. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__insecure_commands.snap +7 -7
  134. zizmor-1.10.0/crates/zizmor/tests/integration/snapshots/integration__snapshot__obfuscation-2.snap +13 -0
  135. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__obfuscation.snap +63 -64
  136. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__overprovisioned_secrets.snap +5 -5
  137. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__ref_confusion-2.snap +3 -3
  138. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__ref_confusion.snap +2 -2
  139. zizmor-1.10.0/crates/zizmor/tests/integration/snapshots/integration__snapshot__secrets_inherit.snap +16 -0
  140. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__self_hosted-3.snap +7 -7
  141. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__self_hosted-4.snap +8 -8
  142. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__self_hosted-5.snap +7 -7
  143. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__self_hosted-6.snap +9 -9
  144. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__self_hosted.snap +3 -3
  145. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__stale_action_refs.snap +3 -3
  146. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__template_injection-10.snap +1 -1
  147. zizmor-1.10.0/crates/zizmor/tests/integration/snapshots/integration__snapshot__template_injection-11.snap +18 -0
  148. zizmor-1.10.0/crates/zizmor/tests/integration/snapshots/integration__snapshot__template_injection-12.snap +18 -0
  149. zizmor-1.10.0/crates/zizmor/tests/integration/snapshots/integration__snapshot__template_injection-13.snap +127 -0
  150. zizmor-1.10.0/crates/zizmor/tests/integration/snapshots/integration__snapshot__template_injection-14.snap +56 -0
  151. zizmor-1.10.0/crates/zizmor/tests/integration/snapshots/integration__snapshot__template_injection-2.snap +26 -0
  152. zizmor-1.10.0/crates/zizmor/tests/integration/snapshots/integration__snapshot__template_injection-3.snap +5 -0
  153. zizmor-1.10.0/crates/zizmor/tests/integration/snapshots/integration__snapshot__template_injection-4.snap +16 -0
  154. zizmor-1.10.0/crates/zizmor/tests/integration/snapshots/integration__snapshot__template_injection-5.snap +38 -0
  155. zizmor-1.10.0/crates/zizmor/tests/integration/snapshots/integration__snapshot__template_injection-6.snap +15 -0
  156. zizmor-1.8.0rc2/crates/zizmor/tests/integration/snapshots/integration__snapshot__template_injection-3.snap → zizmor-1.10.0/crates/zizmor/tests/integration/snapshots/integration__snapshot__template_injection-7.snap +3 -2
  157. zizmor-1.10.0/crates/zizmor/tests/integration/snapshots/integration__snapshot__template_injection-8.snap +61 -0
  158. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__template_injection-9.snap +2 -2
  159. zizmor-1.10.0/crates/zizmor/tests/integration/snapshots/integration__snapshot__template_injection.snap +15 -0
  160. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__unpinned-uses-composite-config-2.snap +7 -7
  161. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__unpinned-uses-composite-config.snap +7 -7
  162. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__unpinned-uses-default-config.snap +5 -5
  163. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__unpinned-uses-empty-config.snap +13 -13
  164. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__unpinned-uses-hash-pin-everything-config.snap +13 -13
  165. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__unpinned-uses-ref-pin-everything-config.snap +3 -3
  166. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__unpinned_images.snap +13 -13
  167. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__unpinned_uses-10.snap +1 -2
  168. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__unpinned_uses-11.snap +1 -2
  169. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__unpinned_uses-12.snap +1 -2
  170. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__unpinned_uses-2.snap +9 -9
  171. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__unpinned_uses-5.snap +6 -6
  172. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__unpinned_uses-6.snap +1 -2
  173. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__unpinned_uses-7.snap +1 -2
  174. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__unpinned_uses-8.snap +1 -2
  175. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__unpinned_uses-9.snap +1 -2
  176. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__unpinned_uses.snap +9 -9
  177. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__unredacted_secrets.snap +5 -5
  178. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__unsound_contains.snap +11 -12
  179. zizmor-1.10.0/crates/zizmor/tests/integration/snapshots/integration__snapshot__use_trusted_publishing-2.snap +16 -0
  180. zizmor-1.10.0/crates/zizmor/tests/integration/snapshots/integration__snapshot__use_trusted_publishing.snap +16 -0
  181. zizmor-1.10.0/crates/zizmor/tests/integration/test-data/anonymous-definition.yml +20 -0
  182. zizmor-1.10.0/crates/zizmor/tests/integration/test-data/artipacked/demo-action/action.yml +15 -0
  183. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/artipacked/issue-447-repro.yml +1 -0
  184. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/artipacked.yml +4 -0
  185. zizmor-1.10.0/crates/zizmor/tests/integration/test-data/bot-conditions.yml +60 -0
  186. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/cache-poisoning/caching-disabled-by-default.yml +3 -0
  187. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/cache-poisoning/caching-enabled-by-default.yml +3 -0
  188. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/cache-poisoning/caching-not-configurable.yml +3 -0
  189. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/cache-poisoning/caching-opt-in-boolean-toggle.yml +3 -0
  190. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/cache-poisoning/caching-opt-in-boolish-toggle.yml +3 -0
  191. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/cache-poisoning/caching-opt-in-expression.yml +3 -0
  192. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/cache-poisoning/caching-opt-in-multi-value-toggle.yml +3 -0
  193. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/cache-poisoning/caching-opt-out.yml +3 -0
  194. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/cache-poisoning/issue-343-repro.yml +1 -0
  195. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/cache-poisoning/issue-378-repro.yml +1 -0
  196. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/cache-poisoning/issue-642-repro.yml +2 -0
  197. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/cache-poisoning/no-cache-aware-steps.yml +3 -0
  198. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/cache-poisoning/publisher-step.yml +3 -0
  199. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/cache-poisoning/workflow-release-branch-trigger.yml +3 -0
  200. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/cache-poisoning/workflow-tag-trigger.yml +3 -0
  201. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/cache-poisoning.yml +3 -0
  202. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/e2e-menagerie/.github/workflows/another-dummy.yml +1 -0
  203. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/e2e-menagerie/.github/workflows/dummy.yml +1 -0
  204. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/e2e-menagerie/.github/workflows/ignored.yaml +1 -0
  205. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/excessive-permissions/issue-336-repro.yml +3 -0
  206. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/excessive-permissions/issue-472-repro.yml +2 -0
  207. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/excessive-permissions/jobs-broaden-permissions.yml +4 -0
  208. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/excessive-permissions/reusable-workflow-call.yml +1 -0
  209. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/excessive-permissions/reusable-workflow-other-triggers.yml +2 -0
  210. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/excessive-permissions/workflow-default-perms-all-jobs-explicit.yml +4 -0
  211. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/excessive-permissions/workflow-default-perms.yml +3 -0
  212. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/excessive-permissions/workflow-empty-perms.yml +4 -0
  213. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/excessive-permissions/workflow-read-all.yml +4 -0
  214. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/excessive-permissions/workflow-write-all.yml +4 -0
  215. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/excessive-permissions/workflow-write-explicit.yml +4 -0
  216. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/excessive-permissions.yml +3 -0
  217. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/forbidden-uses/forbidden-uses-menagerie.yml +1 -0
  218. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/github-env/github-path.yml +3 -0
  219. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/github-env/issue-397-repro.yml +3 -0
  220. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/github_env.yml +3 -0
  221. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/hardcoded-credentials.yml +3 -0
  222. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/inlined-ignores.yml +2 -0
  223. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/insecure-commands/action.yml +2 -2
  224. zizmor-1.10.0/crates/zizmor/tests/integration/test-data/insecure-commands/issue-839-repro.yml +50 -0
  225. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/insecure-commands.yml +4 -2
  226. zizmor-1.10.0/crates/zizmor/tests/integration/test-data/obfuscation/computed-indices.yml +16 -0
  227. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/obfuscation.yml +2 -0
  228. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/overprovisioned-secrets.yml +3 -0
  229. zizmor-1.10.0/crates/zizmor/tests/integration/test-data/pr-960-backstop/action.yml +10 -0
  230. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/ref-confusion/issue-518-repro.yml +1 -0
  231. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/secrets-inherit.yml +6 -0
  232. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/self-hosted/issue-283-repro.yml +1 -0
  233. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/self-hosted/self-hosted-matrix-dimension.yml +3 -0
  234. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/self-hosted/self-hosted-matrix-exclusion.yml +3 -0
  235. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/self-hosted/self-hosted-matrix-inclusion.yml +3 -0
  236. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/self-hosted/self-hosted-runner-group.yml +3 -0
  237. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/self-hosted/self-hosted-runner-label.yml +3 -0
  238. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/self-hosted.yml +3 -0
  239. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/stale-action-refs.yml +2 -0
  240. zizmor-1.10.0/crates/zizmor/tests/integration/test-data/template-injection/codeql-sinks.yml +17 -0
  241. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/template-injection/false-positive-menagerie.yml +1 -0
  242. zizmor-1.10.0/crates/zizmor/tests/integration/test-data/template-injection/input-caps.yml +18 -0
  243. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/template-injection/issue-418-repro.yml +1 -0
  244. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/template-injection/issue-749-repro.yml +1 -0
  245. zizmor-1.10.0/crates/zizmor/tests/integration/test-data/template-injection/issue-883-repro/action.yml +123 -0
  246. zizmor-1.10.0/crates/zizmor/tests/integration/test-data/template-injection/multiline-expression.yml +27 -0
  247. zizmor-1.10.0/crates/zizmor/tests/integration/test-data/template-injection/patterns.yml +32 -0
  248. zizmor-1.10.0/crates/zizmor/tests/integration/test-data/template-injection/pwsh-script.yml +16 -0
  249. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/template-injection/template-injection-dynamic-matrix.yml +1 -0
  250. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/template-injection/template-injection-static-matrix.yml +1 -0
  251. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/template-injection.yml +1 -0
  252. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/unpinned-images.yml +10 -0
  253. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/unpinned-uses/issue-433-repro.yml +1 -0
  254. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/unpinned-uses/issue-659-repro.yml +1 -0
  255. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/unpinned-uses/menagerie-of-uses.yml +1 -0
  256. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/unpinned-uses.yml +1 -0
  257. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/unredacted-secrets.yml +3 -0
  258. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/unsound-contains.yml +3 -0
  259. zizmor-1.10.0/crates/zizmor/tests/integration/test-data/use-trusted-publishing/demo-action/action.yml +11 -0
  260. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/use-trusted-publishing.yml +3 -0
  261. {zizmor-1.8.0rc2 → zizmor-1.10.0}/pyproject.toml +2 -0
  262. zizmor-1.8.0rc2/crates/github-actions-expressions/src/lib.rs +0 -890
  263. zizmor-1.8.0rc2/crates/zizmor/src/audit/artipacked.rs +0 -148
  264. zizmor-1.8.0rc2/crates/zizmor/src/audit/template_injection.rs +0 -386
  265. zizmor-1.8.0rc2/crates/zizmor/src/finding/mod.rs +0 -613
  266. zizmor-1.8.0rc2/crates/zizmor/tests/integration/snapshots/integration__e2e__issue_612_repro.snap +0 -5
  267. zizmor-1.8.0rc2/crates/zizmor/tests/integration/snapshots/integration__snapshot__artipacked-4.snap +0 -18
  268. zizmor-1.8.0rc2/crates/zizmor/tests/integration/snapshots/integration__snapshot__bot_conditions.snap +0 -45
  269. zizmor-1.8.0rc2/crates/zizmor/tests/integration/snapshots/integration__snapshot__excessive_permissions-11.snap +0 -18
  270. zizmor-1.8.0rc2/crates/zizmor/tests/integration/snapshots/integration__snapshot__secrets_inherit.snap +0 -16
  271. zizmor-1.8.0rc2/crates/zizmor/tests/integration/snapshots/integration__snapshot__template_injection-2.snap +0 -16
  272. zizmor-1.8.0rc2/crates/zizmor/tests/integration/snapshots/integration__snapshot__template_injection-4.snap +0 -18
  273. zizmor-1.8.0rc2/crates/zizmor/tests/integration/snapshots/integration__snapshot__template_injection-5.snap +0 -38
  274. zizmor-1.8.0rc2/crates/zizmor/tests/integration/snapshots/integration__snapshot__template_injection-6.snap +0 -17
  275. zizmor-1.8.0rc2/crates/zizmor/tests/integration/snapshots/integration__snapshot__template_injection-7.snap +0 -5
  276. zizmor-1.8.0rc2/crates/zizmor/tests/integration/snapshots/integration__snapshot__template_injection-8.snap +0 -61
  277. zizmor-1.8.0rc2/crates/zizmor/tests/integration/snapshots/integration__snapshot__template_injection.snap +0 -5
  278. zizmor-1.8.0rc2/crates/zizmor/tests/integration/test-data/bot-conditions.yml +0 -24
  279. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/github-actions-expressions/README.md +0 -0
  280. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/github-actions-models/LICENSE +0 -0
  281. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/github-actions-models/README.md +0 -0
  282. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/github-actions-models/src/dependabot/mod.rs +0 -0
  283. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/github-actions-models/src/dependabot/v2.rs +0 -0
  284. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/github-actions-models/src/lib.rs +0 -0
  285. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/github-actions-models/src/workflow/mod.rs +0 -0
  286. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/github-actions-models/tests/sample-actions/gh-action-pip-audit.yml +0 -0
  287. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/github-actions-models/tests/sample-actions/gh-action-pypi-publish.yml +0 -0
  288. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/github-actions-models/tests/sample-actions/gh-action-sigstore-python.yml +0 -0
  289. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/github-actions-models/tests/sample-actions/no-input-output-descriptions.yml +0 -0
  290. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/github-actions-models/tests/sample-actions/setup-python.yml +0 -0
  291. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/github-actions-models/tests/sample-dependabot/v2/pip-audit.yml +0 -0
  292. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/github-actions-models/tests/sample-dependabot/v2/sigstore-python.yml +0 -0
  293. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/github-actions-models/tests/sample-workflows/adafruit-circuitpython-run-tests.yml +0 -0
  294. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/github-actions-models/tests/sample-workflows/false-condition.yml +0 -0
  295. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/github-actions-models/tests/sample-workflows/gh-action-sigstore-python-selftest.yml +0 -0
  296. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/github-actions-models/tests/sample-workflows/git-annex-built-windows.yaml +0 -0
  297. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/github-actions-models/tests/sample-workflows/guacsec-guac-ci.yml +0 -0
  298. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/github-actions-models/tests/sample-workflows/homebrew-core-automerge-triggers.yml +0 -0
  299. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/github-actions-models/tests/sample-workflows/intel-llvm-sycl-linux-run-tests.yml +0 -0
  300. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/github-actions-models/tests/sample-workflows/issue-35.yml +0 -0
  301. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/github-actions-models/tests/sample-workflows/jazzband-tablib-docs-lint.yml +0 -0
  302. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/github-actions-models/tests/sample-workflows/letsencrypt-boulder-boulder-ci.yml +0 -0
  303. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/github-actions-models/tests/sample-workflows/mhils-workflows-python-deploy.yml +0 -0
  304. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/github-actions-models/tests/sample-workflows/openbao-openbao-test-go.yml +0 -0
  305. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/github-actions-models/tests/sample-workflows/pip-api-test.yml +0 -0
  306. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/github-actions-models/tests/sample-workflows/pip-audit-ci.yml +0 -0
  307. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/github-actions-models/tests/sample-workflows/pip-audit-scorecards.yml +0 -0
  308. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/github-actions-models/tests/sample-workflows/pwn-requests.yml +0 -0
  309. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/github-actions-models/tests/sample-workflows/pyca-cryptography-ci.yml +0 -0
  310. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/github-actions-models/tests/sample-workflows/pypi-attestations-release.yml +0 -0
  311. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/github-actions-models/tests/sample-workflows/reusable-workflow-unpinned.yml +0 -0
  312. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/github-actions-models/tests/sample-workflows/rnpgp-rnp-centos-and-fedora.yml +0 -0
  313. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/github-actions-models/tests/sample-workflows/runs-on-expr.yml +0 -0
  314. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/github-actions-models/tests/sample-workflows/runs-on-group-only.yml +0 -0
  315. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/github-actions-models/tests/sample-workflows/scalar-trigger-type.yml +0 -0
  316. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/github-actions-models/tests/sample-workflows/vil02-puzzle_generator-check_examples.yml +0 -0
  317. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/github-actions-models/tests/sample-workflows/zizmor-issue-646.yml +0 -0
  318. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/github-actions-models/tests/sample-workflows/zizmor-issue-650.yml +0 -0
  319. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/github-actions-models/tests/test_action.rs +0 -0
  320. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/github-actions-models/tests/test_dependabot_v2.rs +0 -0
  321. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/yamlpath/LICENSE +0 -0
  322. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/yamlpath/README.md +0 -0
  323. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/yamlpath/tests/testcases/basic.yml +0 -0
  324. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/yamlpath/tests/testcases/comments.yml +0 -0
  325. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/yamlpath/tests/testcases/directives.yml +0 -0
  326. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/yamlpath/tests/testcases/interceding-comment.yml +0 -0
  327. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/yamlpath/tests/testcases/quoted-key.yml +0 -0
  328. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/src/config.rs +0 -0
  329. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/src/github_api.rs +0 -0
  330. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/src/models/uses.rs +0 -0
  331. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/src/state.rs +0 -0
  332. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/tests/integration/common.rs +0 -0
  333. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/tests/integration/main.rs +0 -0
  334. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__e2e__invalid_config_file.snap +0 -0
  335. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__cache_poisoning-14.snap +0 -0
  336. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__cache_poisoning.snap +0 -0
  337. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__cant_retrieve.snap +0 -0
  338. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__excessive_permissions-6.snap +0 -0
  339. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__excessive_permissions-9.snap +0 -0
  340. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__excessive_permissions.snap +0 -0
  341. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__forbidden_uses.snap +0 -0
  342. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__github_env.snap +0 -0
  343. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__self_hosted-2.snap +0 -0
  344. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__self_hosted-7.snap +0 -0
  345. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__self_hosted-8.snap +0 -0
  346. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__unpinned_uses-3.snap +0 -0
  347. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__unpinned_uses-4.snap +0 -0
  348. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/e2e-menagerie/.github/dummy-action-2/action.yml +0 -0
  349. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/e2e-menagerie/.gitignore +0 -0
  350. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/e2e-menagerie/README.md +0 -0
  351. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/e2e-menagerie/dummy-action-1/action.yaml +0 -0
  352. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/forbidden-uses/configs/allow-all.yml +0 -0
  353. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/forbidden-uses/configs/allow-some-refs.yml +0 -0
  354. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/forbidden-uses/configs/allow-some.yml +0 -0
  355. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/forbidden-uses/configs/deny-all.yml +0 -0
  356. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/forbidden-uses/configs/deny-some-refs.yml +0 -0
  357. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/forbidden-uses/configs/deny-some.yml +0 -0
  358. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/github-env/action.yml +0 -0
  359. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/invalid/bad-yaml-1.yml +0 -0
  360. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/invalid/bad-yaml-2.yml +0 -0
  361. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/invalid/blank.yml +0 -0
  362. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/invalid/comment-only.yml +0 -0
  363. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/invalid/empty-action/action.yml +0 -0
  364. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/invalid/empty.yml +0 -0
  365. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/invalid/invalid-action-1/action.yml +0 -0
  366. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/invalid/invalid-action-2/action.yml +0 -0
  367. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/invalid/invalid-workflow-2.yml +0 -0
  368. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/invalid/invalid-workflow.yml +0 -0
  369. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/issue-612-repro/action.yml +0 -0
  370. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/ref-confusion.yml +0 -0
  371. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/several-vulnerabilities.yml +0 -0
  372. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/template-injection/dataflow.yml +0 -0
  373. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/template-injection/issue-22-repro.yml +0 -0
  374. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/template-injection/issue-339-repro.yml +0 -0
  375. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/template-injection/pr-317-repro.yml +0 -0
  376. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/template-injection/pr-425-backstop/action.yml +0 -0
  377. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/template-injection/static-env.yml +0 -0
  378. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/unpinned-uses/action.yml +0 -0
  379. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/unpinned-uses/configs/composite-2.yml +0 -0
  380. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/unpinned-uses/configs/composite.yml +0 -0
  381. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/unpinned-uses/configs/empty.yml +0 -0
  382. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/unpinned-uses/configs/hash-pin-everything.yml +0 -0
  383. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/unpinned-uses/configs/invalid-policy-syntax-1.yml +0 -0
  384. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/unpinned-uses/configs/invalid-policy-syntax-2.yml +0 -0
  385. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/unpinned-uses/configs/invalid-policy-syntax-3.yml +0 -0
  386. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/unpinned-uses/configs/invalid-policy-syntax-4.yml +0 -0
  387. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/unpinned-uses/configs/invalid-policy-syntax-5.yml +0 -0
  388. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/unpinned-uses/configs/invalid-policy-syntax-6.yml +0 -0
  389. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/unpinned-uses/configs/invalid-wrong-policy-object.yml +0 -0
  390. {zizmor-1.8.0rc2 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/unpinned-uses/configs/ref-pin-everything.yml +0 -0
@@ -62,9 +62,9 @@ dependencies = [
62
62
 
63
63
  [[package]]
64
64
  name = "anstream"
65
- version = "0.6.18"
65
+ version = "0.6.19"
66
66
  source = "registry+https://github.com/rust-lang/crates.io-index"
67
- checksum = "8acc5369981196006228e28809f761875c0327210a891e941f4c683b3a99529b"
67
+ checksum = "301af1932e46185686725e0fad2f8f2aa7da69dd70bf6ecc44d6b703844a3933"
68
68
  dependencies = [
69
69
  "anstyle",
70
70
  "anstyle-parse",
@@ -167,7 +167,7 @@ dependencies = [
167
167
  "miniz_oxide",
168
168
  "object",
169
169
  "rustc-demangle",
170
- "windows-targets 0.52.6",
170
+ "windows-targets",
171
171
  ]
172
172
 
173
173
  [[package]]
@@ -285,9 +285,9 @@ dependencies = [
285
285
 
286
286
  [[package]]
287
287
  name = "camino"
288
- version = "1.1.9"
288
+ version = "1.1.10"
289
289
  source = "registry+https://github.com/rust-lang/crates.io-index"
290
- checksum = "8b96ec4966b5813e2c0507c1f86115c8c5abaadc3980879c3424042a02fd1ad3"
290
+ checksum = "0da45bc31171d8d6960122e222a67740df867c1dd53b4d51caa297084c185cab"
291
291
  dependencies = [
292
292
  "serde",
293
293
  ]
@@ -315,9 +315,9 @@ checksum = "613afe47fcd5fac7ccf1db93babcb082c5994d996f20b8b159f2ad1658eb5724"
315
315
 
316
316
  [[package]]
317
317
  name = "clap"
318
- version = "4.5.38"
318
+ version = "4.5.40"
319
319
  source = "registry+https://github.com/rust-lang/crates.io-index"
320
- checksum = "ed93b9805f8ba930df42c2590f05453d5ec36cbb85d018868a5b24d31f6ac000"
320
+ checksum = "40b6887a1d8685cebccf115538db5c0efe625ccac9696ad45c409d96566e910f"
321
321
  dependencies = [
322
322
  "clap_builder",
323
323
  "clap_derive",
@@ -325,9 +325,9 @@ dependencies = [
325
325
 
326
326
  [[package]]
327
327
  name = "clap-verbosity-flag"
328
- version = "3.0.2"
328
+ version = "3.0.3"
329
329
  source = "registry+https://github.com/rust-lang/crates.io-index"
330
- checksum = "2678fade3b77aa3a8ff3aae87e9c008d3fb00473a41c71fbf74e91c8c7b37e84"
330
+ checksum = "eeab6a5cdfc795a05538422012f20a5496f050223c91be4e5420bfd13c641fb1"
331
331
  dependencies = [
332
332
  "clap",
333
333
  "tracing-core",
@@ -335,9 +335,9 @@ dependencies = [
335
335
 
336
336
  [[package]]
337
337
  name = "clap_builder"
338
- version = "4.5.38"
338
+ version = "4.5.40"
339
339
  source = "registry+https://github.com/rust-lang/crates.io-index"
340
- checksum = "379026ff283facf611b0ea629334361c4211d1b12ee01024eec1591133b04120"
340
+ checksum = "e0c66c08ce9f0c698cbce5c0279d0bb6ac936d8674174fe48f736533b964f59e"
341
341
  dependencies = [
342
342
  "anstream",
343
343
  "anstyle",
@@ -347,18 +347,28 @@ dependencies = [
347
347
 
348
348
  [[package]]
349
349
  name = "clap_complete"
350
- version = "4.5.50"
350
+ version = "4.5.54"
351
351
  source = "registry+https://github.com/rust-lang/crates.io-index"
352
- checksum = "c91d3baa3bcd889d60e6ef28874126a0b384fd225ab83aa6d8a801c519194ce1"
352
+ checksum = "aad5b1b4de04fead402672b48897030eec1f3bfe1550776322f59f6d6e6a5677"
353
353
  dependencies = [
354
354
  "clap",
355
355
  ]
356
356
 
357
+ [[package]]
358
+ name = "clap_complete_nushell"
359
+ version = "4.5.7"
360
+ source = "registry+https://github.com/rust-lang/crates.io-index"
361
+ checksum = "cdb8335b398d197fb3176efe9400c6c053a41733c26794316c73423d212b2f3d"
362
+ dependencies = [
363
+ "clap",
364
+ "clap_complete",
365
+ ]
366
+
357
367
  [[package]]
358
368
  name = "clap_derive"
359
- version = "4.5.32"
369
+ version = "4.5.40"
360
370
  source = "registry+https://github.com/rust-lang/crates.io-index"
361
- checksum = "09176aae279615badda0765c0c0b3f6ed53f4709118af73cf4655d85d1530cd7"
371
+ checksum = "d2c7947ae4cc3d851207c1adb5b5e260ff0cca11446b1d6d1423788e442257ce"
362
372
  dependencies = [
363
373
  "heck",
364
374
  "proc-macro2",
@@ -444,6 +454,27 @@ dependencies = [
444
454
  "typenum",
445
455
  ]
446
456
 
457
+ [[package]]
458
+ name = "csv"
459
+ version = "1.3.1"
460
+ source = "registry+https://github.com/rust-lang/crates.io-index"
461
+ checksum = "acdc4883a9c96732e4733212c01447ebd805833b7275a73ca3ee080fd77afdaf"
462
+ dependencies = [
463
+ "csv-core",
464
+ "itoa",
465
+ "ryu",
466
+ "serde",
467
+ ]
468
+
469
+ [[package]]
470
+ name = "csv-core"
471
+ version = "0.1.12"
472
+ source = "registry+https://github.com/rust-lang/crates.io-index"
473
+ checksum = "7d02f3b0da4c6504f86e9cd789d8dbafab48c2321be74e9987593de5a894d93d"
474
+ dependencies = [
475
+ "memchr",
476
+ ]
477
+
447
478
  [[package]]
448
479
  name = "deranged"
449
480
  version = "0.4.0"
@@ -571,9 +602,9 @@ dependencies = [
571
602
 
572
603
  [[package]]
573
604
  name = "flate2"
574
- version = "1.1.1"
605
+ version = "1.1.2"
575
606
  source = "registry+https://github.com/rust-lang/crates.io-index"
576
- checksum = "7ced92e76e966ca2fd84c8f7aa01a4aea65b0eb6648d72f7c8f3e2764a67fece"
607
+ checksum = "4a3d7db9596fecd151c5f638c0ee5d5bd487b6e0ea232e5dc96d5250f6f94b1d"
577
608
  dependencies = [
578
609
  "crc32fast",
579
610
  "miniz_oxide",
@@ -615,6 +646,12 @@ dependencies = [
615
646
  "num",
616
647
  ]
617
648
 
649
+ [[package]]
650
+ name = "fst"
651
+ version = "0.4.7"
652
+ source = "registry+https://github.com/rust-lang/crates.io-index"
653
+ checksum = "7ab85b9b05e3978cc9a9cf8fea7f01b494e1a09ed3037e16ba39edc7a29eb61a"
654
+
618
655
  [[package]]
619
656
  name = "futures"
620
657
  version = "0.3.31"
@@ -749,7 +786,7 @@ checksum = "07e28edb80900c19c28f1072f2e8aeca7fa06b23cd4169cefe1af5aa3260783f"
749
786
 
750
787
  [[package]]
751
788
  name = "github-actions-expressions"
752
- version = "0.0.3"
789
+ version = "0.0.7"
753
790
  dependencies = [
754
791
  "anyhow",
755
792
  "itertools",
@@ -760,11 +797,12 @@ dependencies = [
760
797
 
761
798
  [[package]]
762
799
  name = "github-actions-models"
763
- version = "0.28.3"
800
+ version = "0.31.0"
764
801
  dependencies = [
765
802
  "indexmap",
766
803
  "serde",
767
804
  "serde_yaml",
805
+ "tracing",
768
806
  ]
769
807
 
770
808
  [[package]]
@@ -958,22 +996,26 @@ dependencies = [
958
996
  "tokio",
959
997
  "tokio-rustls",
960
998
  "tower-service",
961
- "webpki-roots",
999
+ "webpki-roots 0.26.9",
962
1000
  ]
963
1001
 
964
1002
  [[package]]
965
1003
  name = "hyper-util"
966
- version = "0.1.11"
1004
+ version = "0.1.13"
967
1005
  source = "registry+https://github.com/rust-lang/crates.io-index"
968
- checksum = "497bbc33a26fdd4af9ed9c70d63f61cf56a938375fbb32df34db9b1cd6d643f2"
1006
+ checksum = "b1c293b6b3d21eca78250dc7dbebd6b9210ec5530e038cbfe0661b5c47ab06e8"
969
1007
  dependencies = [
1008
+ "base64 0.22.1",
970
1009
  "bytes",
971
1010
  "futures-channel",
1011
+ "futures-core",
972
1012
  "futures-util",
973
1013
  "http",
974
1014
  "http-body",
975
1015
  "hyper",
1016
+ "ipnet",
976
1017
  "libc",
1018
+ "percent-encoding",
977
1019
  "pin-project-lite",
978
1020
  "socket2",
979
1021
  "tokio",
@@ -1187,6 +1229,16 @@ version = "2.11.0"
1187
1229
  source = "registry+https://github.com/rust-lang/crates.io-index"
1188
1230
  checksum = "469fb0b9cefa57e3ef31275ee7cacb78f2fdca44e4765491884a2b119d4eb130"
1189
1231
 
1232
+ [[package]]
1233
+ name = "iri-string"
1234
+ version = "0.7.8"
1235
+ source = "registry+https://github.com/rust-lang/crates.io-index"
1236
+ checksum = "dbc5ebe9c3a1a7a5127f920a418f7585e9e758e911d0466ed004f393b0e380b2"
1237
+ dependencies = [
1238
+ "memchr",
1239
+ "serde",
1240
+ ]
1241
+
1190
1242
  [[package]]
1191
1243
  name = "is_terminal_polyfill"
1192
1244
  version = "1.70.1"
@@ -1353,12 +1405,6 @@ dependencies = [
1353
1405
  "syn 2.0.101",
1354
1406
  ]
1355
1407
 
1356
- [[package]]
1357
- name = "mime"
1358
- version = "0.3.17"
1359
- source = "registry+https://github.com/rust-lang/crates.io-index"
1360
- checksum = "6877bb514081ee2a7ff5ef9de3281f14a4dd4bceac4c09388074a6b5df8a139a"
1361
-
1362
1408
  [[package]]
1363
1409
  name = "minimal-lexical"
1364
1410
  version = "0.2.1"
@@ -1566,7 +1612,7 @@ dependencies = [
1566
1612
  "libc",
1567
1613
  "redox_syscall",
1568
1614
  "smallvec",
1569
- "windows-targets 0.52.6",
1615
+ "windows-targets",
1570
1616
  ]
1571
1617
 
1572
1618
  [[package]]
@@ -1577,9 +1623,9 @@ checksum = "e3148f5046208a5d56bcfc03053e3ca6334e51da8dfb19b6cdc8b306fae3283e"
1577
1623
 
1578
1624
  [[package]]
1579
1625
  name = "pest"
1580
- version = "2.8.0"
1626
+ version = "2.8.1"
1581
1627
  source = "registry+https://github.com/rust-lang/crates.io-index"
1582
- checksum = "198db74531d58c70a361c42201efde7e2591e976d518caf7662a47dc5720e7b6"
1628
+ checksum = "1db05f56d34358a8b1066f67cbb203ee3e7ed2ba674a6263a1d5ec6db2204323"
1583
1629
  dependencies = [
1584
1630
  "memchr",
1585
1631
  "thiserror 2.0.12",
@@ -1588,9 +1634,9 @@ dependencies = [
1588
1634
 
1589
1635
  [[package]]
1590
1636
  name = "pest_derive"
1591
- version = "2.8.0"
1637
+ version = "2.8.1"
1592
1638
  source = "registry+https://github.com/rust-lang/crates.io-index"
1593
- checksum = "d725d9cfd79e87dccc9341a2ef39d1b6f6353d68c4b33c177febbe1a402c97c5"
1639
+ checksum = "bb056d9e8ea77922845ec74a1c4e8fb17e7c218cc4fc11a15c5d25e189aa40bc"
1594
1640
  dependencies = [
1595
1641
  "pest",
1596
1642
  "pest_generator",
@@ -1598,9 +1644,9 @@ dependencies = [
1598
1644
 
1599
1645
  [[package]]
1600
1646
  name = "pest_generator"
1601
- version = "2.8.0"
1647
+ version = "2.8.1"
1602
1648
  source = "registry+https://github.com/rust-lang/crates.io-index"
1603
- checksum = "db7d01726be8ab66ab32f9df467ae8b1148906685bbe75c82d1e65d7f5b3f841"
1649
+ checksum = "87e404e638f781eb3202dc82db6760c8ae8a1eeef7fb3fa8264b2ef280504966"
1604
1650
  dependencies = [
1605
1651
  "pest",
1606
1652
  "pest_meta",
@@ -1611,11 +1657,10 @@ dependencies = [
1611
1657
 
1612
1658
  [[package]]
1613
1659
  name = "pest_meta"
1614
- version = "2.8.0"
1660
+ version = "2.8.1"
1615
1661
  source = "registry+https://github.com/rust-lang/crates.io-index"
1616
- checksum = "7f9f832470494906d1fca5329f8ab5791cc60beb230c74815dff541cbd2b5ca0"
1662
+ checksum = "edd1101f170f5903fde0914f899bb503d9ff5271d7ba76bbb70bea63690cc0d5"
1617
1663
  dependencies = [
1618
- "once_cell",
1619
1664
  "pest",
1620
1665
  "sha2",
1621
1666
  ]
@@ -1908,9 +1953,9 @@ checksum = "2b15c43186be67a4fd63bee50d0303afffcef381492ebe2c5d87f324e1b8815c"
1908
1953
 
1909
1954
  [[package]]
1910
1955
  name = "reqwest"
1911
- version = "0.12.15"
1956
+ version = "0.12.20"
1912
1957
  source = "registry+https://github.com/rust-lang/crates.io-index"
1913
- checksum = "d19c46a6fdd48bc4dab94b6103fccc55d34c67cc0ad04653aad4ea2a07cd7bbb"
1958
+ checksum = "eabf4c97d9130e2bf606614eb937e86edac8292eaa6f422f995d7e8de1eb1813"
1914
1959
  dependencies = [
1915
1960
  "base64 0.22.1",
1916
1961
  "bytes",
@@ -1923,16 +1968,12 @@ dependencies = [
1923
1968
  "hyper",
1924
1969
  "hyper-rustls",
1925
1970
  "hyper-util",
1926
- "ipnet",
1927
1971
  "js-sys",
1928
1972
  "log",
1929
- "mime",
1930
- "once_cell",
1931
1973
  "percent-encoding",
1932
1974
  "pin-project-lite",
1933
1975
  "quinn",
1934
1976
  "rustls",
1935
- "rustls-pemfile",
1936
1977
  "rustls-pki-types",
1937
1978
  "serde",
1938
1979
  "serde_json",
@@ -1941,13 +1982,13 @@ dependencies = [
1941
1982
  "tokio",
1942
1983
  "tokio-rustls",
1943
1984
  "tower",
1985
+ "tower-http",
1944
1986
  "tower-service",
1945
1987
  "url",
1946
1988
  "wasm-bindgen",
1947
1989
  "wasm-bindgen-futures",
1948
1990
  "web-sys",
1949
- "webpki-roots",
1950
- "windows-registry",
1991
+ "webpki-roots 1.0.0",
1951
1992
  ]
1952
1993
 
1953
1994
  [[package]]
@@ -2018,15 +2059,6 @@ dependencies = [
2018
2059
  "zeroize",
2019
2060
  ]
2020
2061
 
2021
- [[package]]
2022
- name = "rustls-pemfile"
2023
- version = "2.2.0"
2024
- source = "registry+https://github.com/rust-lang/crates.io-index"
2025
- checksum = "dce314e5fee3f39953d46bb63bb8a46d40c2f8fb7cc5a3b6cab2bde9721d6e50"
2026
- dependencies = [
2027
- "rustls-pki-types",
2028
- ]
2029
-
2030
2062
  [[package]]
2031
2063
  name = "rustls-pki-types"
2032
2064
  version = "1.11.0"
@@ -2569,9 +2601,9 @@ checksum = "1f3ccbac311fea05f86f61904b462b55fb3df8837a366dfc601a0161d0532f20"
2569
2601
 
2570
2602
  [[package]]
2571
2603
  name = "tokio"
2572
- version = "1.45.0"
2604
+ version = "1.45.1"
2573
2605
  source = "registry+https://github.com/rust-lang/crates.io-index"
2574
- checksum = "2513ca694ef9ede0fb23fe71a4ee4107cb102b9dc1930f6d0fd77aae068ae165"
2606
+ checksum = "75ef51a33ef1da925cea3e4eb122833cb377c61439ca401b770f54902b806779"
2575
2607
  dependencies = [
2576
2608
  "backtrace",
2577
2609
  "bytes",
@@ -2670,6 +2702,24 @@ dependencies = [
2670
2702
  "tower-service",
2671
2703
  ]
2672
2704
 
2705
+ [[package]]
2706
+ name = "tower-http"
2707
+ version = "0.6.5"
2708
+ source = "registry+https://github.com/rust-lang/crates.io-index"
2709
+ checksum = "5cc2d9e086a412a451384326f521c8123a99a466b329941a9403696bff9b0da2"
2710
+ dependencies = [
2711
+ "bitflags",
2712
+ "bytes",
2713
+ "futures-util",
2714
+ "http",
2715
+ "http-body",
2716
+ "iri-string",
2717
+ "pin-project-lite",
2718
+ "tower",
2719
+ "tower-layer",
2720
+ "tower-service",
2721
+ ]
2722
+
2673
2723
  [[package]]
2674
2724
  name = "tower-layer"
2675
2725
  version = "0.3.3"
@@ -2757,9 +2807,9 @@ dependencies = [
2757
2807
 
2758
2808
  [[package]]
2759
2809
  name = "tree-sitter"
2760
- version = "0.25.4"
2810
+ version = "0.25.6"
2761
2811
  source = "registry+https://github.com/rust-lang/crates.io-index"
2762
- checksum = "69aff09fea9a41fb061ae6b206cb87cac1b8db07df31be3ba271fbc26760f213"
2812
+ checksum = "a7cf18d43cbf0bfca51f657132cc616a5097edc4424d538bae6fa60142eaf9f0"
2763
2813
  dependencies = [
2764
2814
  "cc",
2765
2815
  "regex",
@@ -2787,9 +2837,9 @@ checksum = "c4013970217383f67b18aef68f6fb2e8d409bc5755227092d32efb0422ba24b8"
2787
2837
 
2788
2838
  [[package]]
2789
2839
  name = "tree-sitter-powershell"
2790
- version = "0.25.2"
2840
+ version = "0.25.6"
2791
2841
  source = "registry+https://github.com/rust-lang/crates.io-index"
2792
- checksum = "377974a9bbd11ef11aa298d60def669f78b579d11745066a59bc4167e53d360b"
2842
+ checksum = "e265a36be4ab388c842629bef61fb719c83f9be3241db92288d064ed425758ba"
2793
2843
  dependencies = [
2794
2844
  "cc",
2795
2845
  "tree-sitter-language",
@@ -2797,9 +2847,9 @@ dependencies = [
2797
2847
 
2798
2848
  [[package]]
2799
2849
  name = "tree-sitter-yaml"
2800
- version = "0.7.0"
2850
+ version = "0.7.1"
2801
2851
  source = "registry+https://github.com/rust-lang/crates.io-index"
2802
- checksum = "d0c99f2b92b677f1a18b6b232fa9329afb5758118238a7d0b29cae324ef50d5e"
2852
+ checksum = "3d5893f2a05e57c86a2338aa3aed167a1e5c68b8fdff3bf4a460941f2d8fc944"
2803
2853
  dependencies = [
2804
2854
  "cc",
2805
2855
  "tree-sitter-language",
@@ -3127,6 +3177,15 @@ dependencies = [
3127
3177
  "rustls-pki-types",
3128
3178
  ]
3129
3179
 
3180
+ [[package]]
3181
+ name = "webpki-roots"
3182
+ version = "1.0.0"
3183
+ source = "registry+https://github.com/rust-lang/crates.io-index"
3184
+ checksum = "2853738d1cc4f2da3a225c18ec6c3721abb31961096e9dbf5ab35fa88b19cfdb"
3185
+ dependencies = [
3186
+ "rustls-pki-types",
3187
+ ]
3188
+
3130
3189
  [[package]]
3131
3190
  name = "winapi"
3132
3191
  version = "0.3.9"
@@ -3190,7 +3249,7 @@ dependencies = [
3190
3249
  "windows-interface",
3191
3250
  "windows-link",
3192
3251
  "windows-result",
3193
- "windows-strings 0.4.0",
3252
+ "windows-strings",
3194
3253
  ]
3195
3254
 
3196
3255
  [[package]]
@@ -3241,17 +3300,6 @@ dependencies = [
3241
3300
  "windows-link",
3242
3301
  ]
3243
3302
 
3244
- [[package]]
3245
- name = "windows-registry"
3246
- version = "0.4.0"
3247
- source = "registry+https://github.com/rust-lang/crates.io-index"
3248
- checksum = "4286ad90ddb45071efd1a66dfa43eb02dd0dfbae1545ad6cc3c51cf34d7e8ba3"
3249
- dependencies = [
3250
- "windows-result",
3251
- "windows-strings 0.3.1",
3252
- "windows-targets 0.53.0",
3253
- ]
3254
-
3255
3303
  [[package]]
3256
3304
  name = "windows-result"
3257
3305
  version = "0.3.2"
@@ -3261,15 +3309,6 @@ dependencies = [
3261
3309
  "windows-link",
3262
3310
  ]
3263
3311
 
3264
- [[package]]
3265
- name = "windows-strings"
3266
- version = "0.3.1"
3267
- source = "registry+https://github.com/rust-lang/crates.io-index"
3268
- checksum = "87fa48cc5d406560701792be122a10132491cff9d0aeb23583cc2dcafc847319"
3269
- dependencies = [
3270
- "windows-link",
3271
- ]
3272
-
3273
3312
  [[package]]
3274
3313
  name = "windows-strings"
3275
3314
  version = "0.4.0"
@@ -3285,7 +3324,7 @@ version = "0.52.0"
3285
3324
  source = "registry+https://github.com/rust-lang/crates.io-index"
3286
3325
  checksum = "282be5f36a8ce781fad8c8ae18fa3f9beff57ec1b52cb3de0789201425d9a33d"
3287
3326
  dependencies = [
3288
- "windows-targets 0.52.6",
3327
+ "windows-targets",
3289
3328
  ]
3290
3329
 
3291
3330
  [[package]]
@@ -3294,7 +3333,7 @@ version = "0.59.0"
3294
3333
  source = "registry+https://github.com/rust-lang/crates.io-index"
3295
3334
  checksum = "1e38bc4d79ed67fd075bcc251a1c39b32a1776bbe92e5bef1f0bf1f8c531853b"
3296
3335
  dependencies = [
3297
- "windows-targets 0.52.6",
3336
+ "windows-targets",
3298
3337
  ]
3299
3338
 
3300
3339
  [[package]]
@@ -3303,30 +3342,14 @@ version = "0.52.6"
3303
3342
  source = "registry+https://github.com/rust-lang/crates.io-index"
3304
3343
  checksum = "9b724f72796e036ab90c1021d4780d4d3d648aca59e491e6b98e725b84e99973"
3305
3344
  dependencies = [
3306
- "windows_aarch64_gnullvm 0.52.6",
3307
- "windows_aarch64_msvc 0.52.6",
3308
- "windows_i686_gnu 0.52.6",
3309
- "windows_i686_gnullvm 0.52.6",
3310
- "windows_i686_msvc 0.52.6",
3311
- "windows_x86_64_gnu 0.52.6",
3312
- "windows_x86_64_gnullvm 0.52.6",
3313
- "windows_x86_64_msvc 0.52.6",
3314
- ]
3315
-
3316
- [[package]]
3317
- name = "windows-targets"
3318
- version = "0.53.0"
3319
- source = "registry+https://github.com/rust-lang/crates.io-index"
3320
- checksum = "b1e4c7e8ceaaf9cb7d7507c974735728ab453b67ef8f18febdd7c11fe59dca8b"
3321
- dependencies = [
3322
- "windows_aarch64_gnullvm 0.53.0",
3323
- "windows_aarch64_msvc 0.53.0",
3324
- "windows_i686_gnu 0.53.0",
3325
- "windows_i686_gnullvm 0.53.0",
3326
- "windows_i686_msvc 0.53.0",
3327
- "windows_x86_64_gnu 0.53.0",
3328
- "windows_x86_64_gnullvm 0.53.0",
3329
- "windows_x86_64_msvc 0.53.0",
3345
+ "windows_aarch64_gnullvm",
3346
+ "windows_aarch64_msvc",
3347
+ "windows_i686_gnu",
3348
+ "windows_i686_gnullvm",
3349
+ "windows_i686_msvc",
3350
+ "windows_x86_64_gnu",
3351
+ "windows_x86_64_gnullvm",
3352
+ "windows_x86_64_msvc",
3330
3353
  ]
3331
3354
 
3332
3355
  [[package]]
@@ -3335,96 +3358,48 @@ version = "0.52.6"
3335
3358
  source = "registry+https://github.com/rust-lang/crates.io-index"
3336
3359
  checksum = "32a4622180e7a0ec044bb555404c800bc9fd9ec262ec147edd5989ccd0c02cd3"
3337
3360
 
3338
- [[package]]
3339
- name = "windows_aarch64_gnullvm"
3340
- version = "0.53.0"
3341
- source = "registry+https://github.com/rust-lang/crates.io-index"
3342
- checksum = "86b8d5f90ddd19cb4a147a5fa63ca848db3df085e25fee3cc10b39b6eebae764"
3343
-
3344
3361
  [[package]]
3345
3362
  name = "windows_aarch64_msvc"
3346
3363
  version = "0.52.6"
3347
3364
  source = "registry+https://github.com/rust-lang/crates.io-index"
3348
3365
  checksum = "09ec2a7bb152e2252b53fa7803150007879548bc709c039df7627cabbd05d469"
3349
3366
 
3350
- [[package]]
3351
- name = "windows_aarch64_msvc"
3352
- version = "0.53.0"
3353
- source = "registry+https://github.com/rust-lang/crates.io-index"
3354
- checksum = "c7651a1f62a11b8cbd5e0d42526e55f2c99886c77e007179efff86c2b137e66c"
3355
-
3356
3367
  [[package]]
3357
3368
  name = "windows_i686_gnu"
3358
3369
  version = "0.52.6"
3359
3370
  source = "registry+https://github.com/rust-lang/crates.io-index"
3360
3371
  checksum = "8e9b5ad5ab802e97eb8e295ac6720e509ee4c243f69d781394014ebfe8bbfa0b"
3361
3372
 
3362
- [[package]]
3363
- name = "windows_i686_gnu"
3364
- version = "0.53.0"
3365
- source = "registry+https://github.com/rust-lang/crates.io-index"
3366
- checksum = "c1dc67659d35f387f5f6c479dc4e28f1d4bb90ddd1a5d3da2e5d97b42d6272c3"
3367
-
3368
3373
  [[package]]
3369
3374
  name = "windows_i686_gnullvm"
3370
3375
  version = "0.52.6"
3371
3376
  source = "registry+https://github.com/rust-lang/crates.io-index"
3372
3377
  checksum = "0eee52d38c090b3caa76c563b86c3a4bd71ef1a819287c19d586d7334ae8ed66"
3373
3378
 
3374
- [[package]]
3375
- name = "windows_i686_gnullvm"
3376
- version = "0.53.0"
3377
- source = "registry+https://github.com/rust-lang/crates.io-index"
3378
- checksum = "9ce6ccbdedbf6d6354471319e781c0dfef054c81fbc7cf83f338a4296c0cae11"
3379
-
3380
3379
  [[package]]
3381
3380
  name = "windows_i686_msvc"
3382
3381
  version = "0.52.6"
3383
3382
  source = "registry+https://github.com/rust-lang/crates.io-index"
3384
3383
  checksum = "240948bc05c5e7c6dabba28bf89d89ffce3e303022809e73deaefe4f6ec56c66"
3385
3384
 
3386
- [[package]]
3387
- name = "windows_i686_msvc"
3388
- version = "0.53.0"
3389
- source = "registry+https://github.com/rust-lang/crates.io-index"
3390
- checksum = "581fee95406bb13382d2f65cd4a908ca7b1e4c2f1917f143ba16efe98a589b5d"
3391
-
3392
3385
  [[package]]
3393
3386
  name = "windows_x86_64_gnu"
3394
3387
  version = "0.52.6"
3395
3388
  source = "registry+https://github.com/rust-lang/crates.io-index"
3396
3389
  checksum = "147a5c80aabfbf0c7d901cb5895d1de30ef2907eb21fbbab29ca94c5b08b1a78"
3397
3390
 
3398
- [[package]]
3399
- name = "windows_x86_64_gnu"
3400
- version = "0.53.0"
3401
- source = "registry+https://github.com/rust-lang/crates.io-index"
3402
- checksum = "2e55b5ac9ea33f2fc1716d1742db15574fd6fc8dadc51caab1c16a3d3b4190ba"
3403
-
3404
3391
  [[package]]
3405
3392
  name = "windows_x86_64_gnullvm"
3406
3393
  version = "0.52.6"
3407
3394
  source = "registry+https://github.com/rust-lang/crates.io-index"
3408
3395
  checksum = "24d5b23dc417412679681396f2b49f3de8c1473deb516bd34410872eff51ed0d"
3409
3396
 
3410
- [[package]]
3411
- name = "windows_x86_64_gnullvm"
3412
- version = "0.53.0"
3413
- source = "registry+https://github.com/rust-lang/crates.io-index"
3414
- checksum = "0a6e035dd0599267ce1ee132e51c27dd29437f63325753051e71dd9e42406c57"
3415
-
3416
3397
  [[package]]
3417
3398
  name = "windows_x86_64_msvc"
3418
3399
  version = "0.52.6"
3419
3400
  source = "registry+https://github.com/rust-lang/crates.io-index"
3420
3401
  checksum = "589f6da84c646204747d1270a2a5661ea66ed1cced2631d546fdfb155959f9ec"
3421
3402
 
3422
- [[package]]
3423
- name = "windows_x86_64_msvc"
3424
- version = "0.53.0"
3425
- source = "registry+https://github.com/rust-lang/crates.io-index"
3426
- checksum = "271414315aff87387382ec3d271b52d7ae78726f5d44ac98b4f4030c91880486"
3427
-
3428
3403
  [[package]]
3429
3404
  name = "wit-bindgen-rt"
3430
3405
  version = "0.39.0"
@@ -3464,8 +3439,9 @@ checksum = "fdd20c5420375476fbd4394763288da7eb0cc0b8c11deed431a91562af7335d3"
3464
3439
 
3465
3440
  [[package]]
3466
3441
  name = "yamlpath"
3467
- version = "0.18.0"
3442
+ version = "0.23.0"
3468
3443
  dependencies = [
3444
+ "line-index",
3469
3445
  "serde",
3470
3446
  "serde_yaml",
3471
3447
  "thiserror 2.0.12",
@@ -3594,7 +3570,7 @@ dependencies = [
3594
3570
 
3595
3571
  [[package]]
3596
3572
  name = "zizmor"
3597
- version = "1.8.0-rc2"
3573
+ version = "1.10.0"
3598
3574
  dependencies = [
3599
3575
  "annotate-snippets",
3600
3576
  "anstream",
@@ -3604,8 +3580,11 @@ dependencies = [
3604
3580
  "clap",
3605
3581
  "clap-verbosity-flag",
3606
3582
  "clap_complete",
3583
+ "clap_complete_nushell",
3584
+ "csv",
3607
3585
  "etcetera",
3608
3586
  "flate2",
3587
+ "fst",
3609
3588
  "github-actions-expressions",
3610
3589
  "github-actions-models",
3611
3590
  "http-cache-reqwest",