zizmor 1.9.0__tar.gz → 1.10.0__tar.gz

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Potentially problematic release.


This version of zizmor might be problematic. Click here for more details.

Files changed (389) hide show
  1. {zizmor-1.9.0 → zizmor-1.10.0}/Cargo.lock +95 -156
  2. {zizmor-1.9.0 → zizmor-1.10.0}/Cargo.toml +22 -14
  3. {zizmor-1.9.0 → zizmor-1.10.0}/PKG-INFO +15 -1
  4. {zizmor-1.9.0 → zizmor-1.10.0}/crates/github-actions-expressions/Cargo.toml +4 -1
  5. {zizmor-1.9.0 → zizmor-1.10.0}/crates/github-actions-expressions/src/context.rs +129 -74
  6. {zizmor-1.9.0 → zizmor-1.10.0}/crates/github-actions-expressions/src/expr.pest +2 -2
  7. zizmor-1.10.0/crates/github-actions-expressions/src/lib.rs +1390 -0
  8. {zizmor-1.9.0 → zizmor-1.10.0}/crates/github-actions-models/Cargo.toml +5 -1
  9. {zizmor-1.9.0 → zizmor-1.10.0}/crates/github-actions-models/src/action.rs +5 -5
  10. {zizmor-1.9.0 → zizmor-1.10.0}/crates/github-actions-models/src/common/expr.rs +15 -7
  11. {zizmor-1.9.0 → zizmor-1.10.0}/crates/github-actions-models/src/common.rs +18 -4
  12. {zizmor-1.9.0 → zizmor-1.10.0}/crates/github-actions-models/src/workflow/event.rs +25 -4
  13. {zizmor-1.9.0 → zizmor-1.10.0}/crates/github-actions-models/src/workflow/job.rs +7 -7
  14. {zizmor-1.9.0 → zizmor-1.10.0}/crates/github-actions-models/tests/sample-workflows/homebrew-core-dispatch-rebottle.yml +9 -9
  15. {zizmor-1.9.0 → zizmor-1.10.0}/crates/github-actions-models/tests/test_workflow.rs +0 -2
  16. {zizmor-1.9.0 → zizmor-1.10.0}/crates/yamlpath/Cargo.toml +5 -1
  17. {zizmor-1.9.0 → zizmor-1.10.0}/crates/yamlpath/src/lib.rs +377 -31
  18. {zizmor-1.9.0 → zizmor-1.10.0}/crates/yamlpath/tests/integration_test.rs +16 -4
  19. zizmor-1.10.0/crates/yamlpath/tests/testcases/exact-features.yml +88 -0
  20. {zizmor-1.9.0 → zizmor-1.10.0}/crates/yamlpath/tests/testcases/flow.yml +21 -2
  21. zizmor-1.10.0/crates/yamlpath/tests/testcases/key-only-features.yml +32 -0
  22. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/Cargo.toml +5 -2
  23. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/README.md +14 -0
  24. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/data/context-capabilities.csv +23 -12
  25. zizmor-1.10.0/crates/zizmor/src/audit/anonymous_definition.rs +65 -0
  26. zizmor-1.10.0/crates/zizmor/src/audit/artipacked.rs +359 -0
  27. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/src/audit/bot_conditions.rs +86 -38
  28. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/src/audit/cache_poisoning.rs +3 -1
  29. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/src/audit/dangerous_triggers.rs +1 -1
  30. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/src/audit/excessive_permissions.rs +3 -3
  31. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/src/audit/forbidden_uses.rs +1 -1
  32. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/src/audit/github_env.rs +2 -1
  33. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/src/audit/hardcoded_container_credentials.rs +2 -3
  34. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/src/audit/impostor_commit.rs +2 -2
  35. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/src/audit/insecure_commands.rs +6 -6
  36. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/src/audit/known_vulnerable_actions.rs +1 -1
  37. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/src/audit/mod.rs +9 -8
  38. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/src/audit/obfuscation.rs +40 -10
  39. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/src/audit/overprovisioned_secrets.rs +24 -14
  40. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/src/audit/ref_confusion.rs +3 -2
  41. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/src/audit/secrets_inherit.rs +4 -1
  42. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/src/audit/self_hosted_runner.rs +2 -3
  43. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/src/audit/stale_action_refs.rs +2 -2
  44. zizmor-1.10.0/crates/zizmor/src/audit/template_injection.rs +1098 -0
  45. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/src/audit/unpinned_images.rs +5 -2
  46. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/src/audit/unpinned_uses.rs +1 -1
  47. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/src/audit/unredacted_secrets.rs +9 -7
  48. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/src/audit/unsound_contains.rs +24 -15
  49. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/src/audit/use_trusted_publishing.rs +63 -54
  50. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/src/data/github-action.json +695 -695
  51. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/src/data/github-workflow.json +1742 -1715
  52. zizmor-1.10.0/crates/zizmor/src/finding/location.rs +690 -0
  53. zizmor-1.10.0/crates/zizmor/src/finding.rs +298 -0
  54. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/src/main.rs +57 -3
  55. zizmor-1.10.0/crates/zizmor/src/models/action.rs +233 -0
  56. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/src/models/coordinate.rs +75 -78
  57. zizmor-1.10.0/crates/zizmor/src/models/inputs.rs +40 -0
  58. zizmor-1.9.0/crates/zizmor/src/models.rs → zizmor-1.10.0/crates/zizmor/src/models/workflow.rs +224 -365
  59. zizmor-1.10.0/crates/zizmor/src/models.rs +63 -0
  60. zizmor-1.10.0/crates/zizmor/src/output/fix.rs +141 -0
  61. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/src/output/github.rs +1 -4
  62. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/src/output/mod.rs +1 -0
  63. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/src/output/plain.rs +17 -2
  64. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/src/output/sarif.rs +16 -15
  65. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/src/registry.rs +34 -10
  66. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/src/utils.rs +392 -26
  67. zizmor-1.10.0/crates/zizmor/src/yaml_patch/mod.rs +3328 -0
  68. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/acceptance.rs +15 -0
  69. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/e2e.rs +29 -0
  70. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshot.rs +62 -0
  71. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__e2e__gha_hazmat.snap +70 -56
  72. zizmor-1.10.0/crates/zizmor/tests/integration/snapshots/integration__e2e__invalid_input_not_strict-2.snap +7 -0
  73. zizmor-1.10.0/crates/zizmor/tests/integration/snapshots/integration__e2e__invalid_input_not_strict.snap +7 -0
  74. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__e2e__invalid_inputs-10.snap +3 -4
  75. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__e2e__invalid_inputs-2.snap +3 -4
  76. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__e2e__invalid_inputs-3.snap +3 -4
  77. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__e2e__invalid_inputs-4.snap +3 -4
  78. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__e2e__invalid_inputs-5.snap +3 -4
  79. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__e2e__invalid_inputs-6.snap +3 -4
  80. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__e2e__invalid_inputs-7.snap +3 -4
  81. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__e2e__invalid_inputs-8.snap +3 -4
  82. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__e2e__invalid_inputs-9.snap +3 -4
  83. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__e2e__invalid_inputs.snap +3 -4
  84. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__e2e__issue_569.snap +3 -3
  85. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__e2e__issue_726.snap +2 -2
  86. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__e2e__menagerie-2.snap +1 -1
  87. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__e2e__menagerie.snap +1 -1
  88. zizmor-1.10.0/crates/zizmor/tests/integration/snapshots/integration__e2e__pr_960_backstop.snap +11 -0
  89. zizmor-1.10.0/crates/zizmor/tests/integration/snapshots/integration__snapshot__anonymous_definition-2.snap +28 -0
  90. zizmor-1.10.0/crates/zizmor/tests/integration/snapshots/integration__snapshot__anonymous_definition.snap +28 -0
  91. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__artipacked-2.snap +5 -4
  92. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__artipacked-3.snap +10 -8
  93. zizmor-1.10.0/crates/zizmor/tests/integration/snapshots/integration__snapshot__artipacked-4.snap +19 -0
  94. zizmor-1.10.0/crates/zizmor/tests/integration/snapshots/integration__snapshot__artipacked-5.snap +29 -0
  95. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__artipacked.snap +5 -4
  96. zizmor-1.10.0/crates/zizmor/tests/integration/snapshots/integration__snapshot__bot_conditions.snap +139 -0
  97. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__cache_poisoning-10.snap +6 -6
  98. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__cache_poisoning-11.snap +13 -13
  99. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__cache_poisoning-12.snap +2 -2
  100. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__cache_poisoning-13.snap +2 -2
  101. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__cache_poisoning-15.snap +8 -8
  102. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__cache_poisoning-2.snap +2 -2
  103. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__cache_poisoning-3.snap +4 -4
  104. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__cache_poisoning-4.snap +5 -5
  105. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__cache_poisoning-5.snap +6 -6
  106. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__cache_poisoning-8.snap +2 -2
  107. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__cache_poisoning-9.snap +6 -6
  108. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__excessive_permissions-10.snap +7 -7
  109. zizmor-1.10.0/crates/zizmor/tests/integration/snapshots/integration__snapshot__excessive_permissions-11.snap +19 -0
  110. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__excessive_permissions-12.snap +12 -11
  111. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__excessive_permissions-2.snap +3 -3
  112. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__excessive_permissions-3.snap +8 -8
  113. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__excessive_permissions-4.snap +3 -3
  114. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__excessive_permissions-5.snap +3 -3
  115. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__excessive_permissions-7.snap +19 -17
  116. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__excessive_permissions-8.snap +7 -7
  117. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__forbidden_uses-2.snap +7 -7
  118. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__forbidden_uses-3.snap +3 -3
  119. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__forbidden_uses-4.snap +5 -5
  120. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__forbidden_uses-5.snap +5 -6
  121. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__forbidden_uses-6.snap +3 -4
  122. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__github_env-2.snap +5 -5
  123. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__github_env-3.snap +5 -5
  124. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__github_output.snap +2 -2
  125. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__insecure_commands-2.snap +3 -3
  126. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__insecure_commands-4.snap +5 -5
  127. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__insecure_commands.snap +5 -5
  128. zizmor-1.10.0/crates/zizmor/tests/integration/snapshots/integration__snapshot__obfuscation-2.snap +13 -0
  129. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__obfuscation.snap +62 -62
  130. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__overprovisioned_secrets.snap +5 -5
  131. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__ref_confusion-2.snap +3 -3
  132. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__ref_confusion.snap +2 -2
  133. zizmor-1.10.0/crates/zizmor/tests/integration/snapshots/integration__snapshot__secrets_inherit.snap +16 -0
  134. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__self_hosted-3.snap +7 -7
  135. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__self_hosted-4.snap +8 -8
  136. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__self_hosted-5.snap +7 -7
  137. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__self_hosted-6.snap +9 -9
  138. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__self_hosted.snap +3 -3
  139. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__stale_action_refs.snap +3 -3
  140. zizmor-1.10.0/crates/zizmor/tests/integration/snapshots/integration__snapshot__template_injection-11.snap +18 -0
  141. zizmor-1.10.0/crates/zizmor/tests/integration/snapshots/integration__snapshot__template_injection-12.snap +18 -0
  142. zizmor-1.10.0/crates/zizmor/tests/integration/snapshots/integration__snapshot__template_injection-13.snap +127 -0
  143. zizmor-1.10.0/crates/zizmor/tests/integration/snapshots/integration__snapshot__template_injection-14.snap +56 -0
  144. zizmor-1.10.0/crates/zizmor/tests/integration/snapshots/integration__snapshot__template_injection-2.snap +26 -0
  145. zizmor-1.10.0/crates/zizmor/tests/integration/snapshots/integration__snapshot__template_injection-4.snap +16 -0
  146. zizmor-1.10.0/crates/zizmor/tests/integration/snapshots/integration__snapshot__template_injection-5.snap +38 -0
  147. zizmor-1.10.0/crates/zizmor/tests/integration/snapshots/integration__snapshot__template_injection-6.snap +15 -0
  148. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__template_injection-7.snap +2 -1
  149. zizmor-1.10.0/crates/zizmor/tests/integration/snapshots/integration__snapshot__template_injection-8.snap +61 -0
  150. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__template_injection.snap +5 -6
  151. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__unpinned-uses-composite-config-2.snap +7 -7
  152. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__unpinned-uses-composite-config.snap +7 -7
  153. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__unpinned-uses-default-config.snap +5 -5
  154. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__unpinned-uses-empty-config.snap +13 -13
  155. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__unpinned-uses-hash-pin-everything-config.snap +13 -13
  156. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__unpinned-uses-ref-pin-everything-config.snap +3 -3
  157. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__unpinned_images.snap +13 -13
  158. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__unpinned_uses-10.snap +1 -2
  159. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__unpinned_uses-11.snap +1 -2
  160. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__unpinned_uses-12.snap +1 -2
  161. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__unpinned_uses-2.snap +9 -9
  162. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__unpinned_uses-5.snap +6 -6
  163. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__unpinned_uses-6.snap +1 -2
  164. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__unpinned_uses-7.snap +1 -2
  165. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__unpinned_uses-8.snap +1 -2
  166. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__unpinned_uses-9.snap +1 -2
  167. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__unpinned_uses.snap +9 -9
  168. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__unredacted_secrets.snap +5 -5
  169. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__unsound_contains.snap +11 -12
  170. zizmor-1.10.0/crates/zizmor/tests/integration/snapshots/integration__snapshot__use_trusted_publishing-2.snap +16 -0
  171. zizmor-1.10.0/crates/zizmor/tests/integration/snapshots/integration__snapshot__use_trusted_publishing.snap +16 -0
  172. zizmor-1.10.0/crates/zizmor/tests/integration/test-data/anonymous-definition.yml +20 -0
  173. zizmor-1.10.0/crates/zizmor/tests/integration/test-data/artipacked/demo-action/action.yml +15 -0
  174. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/artipacked/issue-447-repro.yml +1 -0
  175. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/artipacked.yml +4 -0
  176. zizmor-1.10.0/crates/zizmor/tests/integration/test-data/bot-conditions.yml +60 -0
  177. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/cache-poisoning/caching-disabled-by-default.yml +3 -0
  178. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/cache-poisoning/caching-enabled-by-default.yml +3 -0
  179. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/cache-poisoning/caching-not-configurable.yml +3 -0
  180. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/cache-poisoning/caching-opt-in-boolean-toggle.yml +3 -0
  181. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/cache-poisoning/caching-opt-in-boolish-toggle.yml +3 -0
  182. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/cache-poisoning/caching-opt-in-expression.yml +3 -0
  183. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/cache-poisoning/caching-opt-in-multi-value-toggle.yml +3 -0
  184. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/cache-poisoning/caching-opt-out.yml +3 -0
  185. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/cache-poisoning/issue-343-repro.yml +1 -0
  186. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/cache-poisoning/issue-378-repro.yml +1 -0
  187. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/cache-poisoning/issue-642-repro.yml +2 -0
  188. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/cache-poisoning/no-cache-aware-steps.yml +3 -0
  189. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/cache-poisoning/publisher-step.yml +3 -0
  190. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/cache-poisoning/workflow-release-branch-trigger.yml +3 -0
  191. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/cache-poisoning/workflow-tag-trigger.yml +3 -0
  192. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/cache-poisoning.yml +3 -0
  193. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/e2e-menagerie/.github/workflows/another-dummy.yml +1 -0
  194. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/e2e-menagerie/.github/workflows/dummy.yml +1 -0
  195. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/e2e-menagerie/.github/workflows/ignored.yaml +1 -0
  196. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/excessive-permissions/issue-336-repro.yml +3 -0
  197. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/excessive-permissions/issue-472-repro.yml +2 -0
  198. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/excessive-permissions/jobs-broaden-permissions.yml +4 -0
  199. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/excessive-permissions/reusable-workflow-call.yml +1 -0
  200. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/excessive-permissions/reusable-workflow-other-triggers.yml +2 -0
  201. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/excessive-permissions/workflow-default-perms-all-jobs-explicit.yml +4 -0
  202. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/excessive-permissions/workflow-default-perms.yml +3 -0
  203. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/excessive-permissions/workflow-empty-perms.yml +4 -0
  204. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/excessive-permissions/workflow-read-all.yml +4 -0
  205. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/excessive-permissions/workflow-write-all.yml +4 -0
  206. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/excessive-permissions/workflow-write-explicit.yml +4 -0
  207. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/excessive-permissions.yml +3 -0
  208. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/forbidden-uses/forbidden-uses-menagerie.yml +1 -0
  209. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/github-env/github-path.yml +3 -0
  210. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/github-env/issue-397-repro.yml +3 -0
  211. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/github_env.yml +3 -0
  212. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/hardcoded-credentials.yml +3 -0
  213. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/inlined-ignores.yml +2 -0
  214. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/insecure-commands/issue-839-repro.yml +5 -0
  215. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/insecure-commands.yml +2 -0
  216. zizmor-1.10.0/crates/zizmor/tests/integration/test-data/obfuscation/computed-indices.yml +16 -0
  217. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/obfuscation.yml +2 -0
  218. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/overprovisioned-secrets.yml +3 -0
  219. zizmor-1.10.0/crates/zizmor/tests/integration/test-data/pr-960-backstop/action.yml +10 -0
  220. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/ref-confusion/issue-518-repro.yml +1 -0
  221. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/secrets-inherit.yml +6 -0
  222. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/self-hosted/issue-283-repro.yml +1 -0
  223. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/self-hosted/self-hosted-matrix-dimension.yml +3 -0
  224. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/self-hosted/self-hosted-matrix-exclusion.yml +3 -0
  225. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/self-hosted/self-hosted-matrix-inclusion.yml +3 -0
  226. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/self-hosted/self-hosted-runner-group.yml +3 -0
  227. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/self-hosted/self-hosted-runner-label.yml +3 -0
  228. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/self-hosted.yml +3 -0
  229. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/stale-action-refs.yml +2 -0
  230. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/template-injection/codeql-sinks.yml +1 -0
  231. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/template-injection/false-positive-menagerie.yml +1 -0
  232. zizmor-1.10.0/crates/zizmor/tests/integration/test-data/template-injection/input-caps.yml +18 -0
  233. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/template-injection/issue-418-repro.yml +1 -0
  234. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/template-injection/issue-749-repro.yml +1 -0
  235. zizmor-1.10.0/crates/zizmor/tests/integration/test-data/template-injection/issue-883-repro/action.yml +123 -0
  236. zizmor-1.10.0/crates/zizmor/tests/integration/test-data/template-injection/multiline-expression.yml +27 -0
  237. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/template-injection/patterns.yml +1 -0
  238. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/template-injection/pwsh-script.yml +1 -0
  239. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/template-injection/template-injection-dynamic-matrix.yml +1 -0
  240. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/template-injection/template-injection-static-matrix.yml +1 -0
  241. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/template-injection.yml +1 -0
  242. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/unpinned-images.yml +10 -0
  243. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/unpinned-uses/issue-433-repro.yml +1 -0
  244. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/unpinned-uses/issue-659-repro.yml +1 -0
  245. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/unpinned-uses/menagerie-of-uses.yml +1 -0
  246. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/unpinned-uses.yml +1 -0
  247. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/unredacted-secrets.yml +3 -0
  248. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/unsound-contains.yml +3 -0
  249. zizmor-1.10.0/crates/zizmor/tests/integration/test-data/use-trusted-publishing/demo-action/action.yml +11 -0
  250. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/use-trusted-publishing.yml +3 -0
  251. zizmor-1.9.0/crates/github-actions-expressions/src/lib.rs +0 -838
  252. zizmor-1.9.0/crates/zizmor/src/audit/artipacked.rs +0 -148
  253. zizmor-1.9.0/crates/zizmor/src/audit/template_injection.rs +0 -342
  254. zizmor-1.9.0/crates/zizmor/src/finding/mod.rs +0 -613
  255. zizmor-1.9.0/crates/zizmor/tests/integration/snapshots/integration__snapshot__artipacked-4.snap +0 -18
  256. zizmor-1.9.0/crates/zizmor/tests/integration/snapshots/integration__snapshot__bot_conditions.snap +0 -45
  257. zizmor-1.9.0/crates/zizmor/tests/integration/snapshots/integration__snapshot__excessive_permissions-11.snap +0 -18
  258. zizmor-1.9.0/crates/zizmor/tests/integration/snapshots/integration__snapshot__secrets_inherit.snap +0 -16
  259. zizmor-1.9.0/crates/zizmor/tests/integration/snapshots/integration__snapshot__template_injection-11.snap +0 -18
  260. zizmor-1.9.0/crates/zizmor/tests/integration/snapshots/integration__snapshot__template_injection-12.snap +0 -21
  261. zizmor-1.9.0/crates/zizmor/tests/integration/snapshots/integration__snapshot__template_injection-2.snap +0 -27
  262. zizmor-1.9.0/crates/zizmor/tests/integration/snapshots/integration__snapshot__template_injection-4.snap +0 -18
  263. zizmor-1.9.0/crates/zizmor/tests/integration/snapshots/integration__snapshot__template_injection-5.snap +0 -38
  264. zizmor-1.9.0/crates/zizmor/tests/integration/snapshots/integration__snapshot__template_injection-6.snap +0 -17
  265. zizmor-1.9.0/crates/zizmor/tests/integration/snapshots/integration__snapshot__template_injection-8.snap +0 -61
  266. zizmor-1.9.0/crates/zizmor/tests/integration/test-data/bot-conditions.yml +0 -24
  267. {zizmor-1.9.0 → zizmor-1.10.0}/crates/github-actions-expressions/README.md +0 -0
  268. {zizmor-1.9.0 → zizmor-1.10.0}/crates/github-actions-models/LICENSE +0 -0
  269. {zizmor-1.9.0 → zizmor-1.10.0}/crates/github-actions-models/README.md +0 -0
  270. {zizmor-1.9.0 → zizmor-1.10.0}/crates/github-actions-models/src/dependabot/mod.rs +0 -0
  271. {zizmor-1.9.0 → zizmor-1.10.0}/crates/github-actions-models/src/dependabot/v2.rs +0 -0
  272. {zizmor-1.9.0 → zizmor-1.10.0}/crates/github-actions-models/src/lib.rs +0 -0
  273. {zizmor-1.9.0 → zizmor-1.10.0}/crates/github-actions-models/src/workflow/mod.rs +0 -0
  274. {zizmor-1.9.0 → zizmor-1.10.0}/crates/github-actions-models/tests/sample-actions/gh-action-pip-audit.yml +0 -0
  275. {zizmor-1.9.0 → zizmor-1.10.0}/crates/github-actions-models/tests/sample-actions/gh-action-pypi-publish.yml +0 -0
  276. {zizmor-1.9.0 → zizmor-1.10.0}/crates/github-actions-models/tests/sample-actions/gh-action-sigstore-python.yml +0 -0
  277. {zizmor-1.9.0 → zizmor-1.10.0}/crates/github-actions-models/tests/sample-actions/no-input-output-descriptions.yml +0 -0
  278. {zizmor-1.9.0 → zizmor-1.10.0}/crates/github-actions-models/tests/sample-actions/setup-python.yml +0 -0
  279. {zizmor-1.9.0 → zizmor-1.10.0}/crates/github-actions-models/tests/sample-dependabot/v2/pip-audit.yml +0 -0
  280. {zizmor-1.9.0 → zizmor-1.10.0}/crates/github-actions-models/tests/sample-dependabot/v2/sigstore-python.yml +0 -0
  281. {zizmor-1.9.0 → zizmor-1.10.0}/crates/github-actions-models/tests/sample-workflows/adafruit-circuitpython-run-tests.yml +0 -0
  282. {zizmor-1.9.0 → zizmor-1.10.0}/crates/github-actions-models/tests/sample-workflows/false-condition.yml +0 -0
  283. {zizmor-1.9.0 → zizmor-1.10.0}/crates/github-actions-models/tests/sample-workflows/gh-action-sigstore-python-selftest.yml +0 -0
  284. {zizmor-1.9.0 → zizmor-1.10.0}/crates/github-actions-models/tests/sample-workflows/git-annex-built-windows.yaml +0 -0
  285. {zizmor-1.9.0 → zizmor-1.10.0}/crates/github-actions-models/tests/sample-workflows/guacsec-guac-ci.yml +0 -0
  286. {zizmor-1.9.0 → zizmor-1.10.0}/crates/github-actions-models/tests/sample-workflows/homebrew-core-automerge-triggers.yml +0 -0
  287. {zizmor-1.9.0 → zizmor-1.10.0}/crates/github-actions-models/tests/sample-workflows/intel-llvm-sycl-linux-run-tests.yml +0 -0
  288. {zizmor-1.9.0 → zizmor-1.10.0}/crates/github-actions-models/tests/sample-workflows/issue-35.yml +0 -0
  289. {zizmor-1.9.0 → zizmor-1.10.0}/crates/github-actions-models/tests/sample-workflows/jazzband-tablib-docs-lint.yml +0 -0
  290. {zizmor-1.9.0 → zizmor-1.10.0}/crates/github-actions-models/tests/sample-workflows/letsencrypt-boulder-boulder-ci.yml +0 -0
  291. {zizmor-1.9.0 → zizmor-1.10.0}/crates/github-actions-models/tests/sample-workflows/mhils-workflows-python-deploy.yml +0 -0
  292. {zizmor-1.9.0 → zizmor-1.10.0}/crates/github-actions-models/tests/sample-workflows/openbao-openbao-test-go.yml +0 -0
  293. {zizmor-1.9.0 → zizmor-1.10.0}/crates/github-actions-models/tests/sample-workflows/pip-api-test.yml +0 -0
  294. {zizmor-1.9.0 → zizmor-1.10.0}/crates/github-actions-models/tests/sample-workflows/pip-audit-ci.yml +0 -0
  295. {zizmor-1.9.0 → zizmor-1.10.0}/crates/github-actions-models/tests/sample-workflows/pip-audit-scorecards.yml +0 -0
  296. {zizmor-1.9.0 → zizmor-1.10.0}/crates/github-actions-models/tests/sample-workflows/pwn-requests.yml +0 -0
  297. {zizmor-1.9.0 → zizmor-1.10.0}/crates/github-actions-models/tests/sample-workflows/pyca-cryptography-ci.yml +0 -0
  298. {zizmor-1.9.0 → zizmor-1.10.0}/crates/github-actions-models/tests/sample-workflows/pypi-attestations-release.yml +0 -0
  299. {zizmor-1.9.0 → zizmor-1.10.0}/crates/github-actions-models/tests/sample-workflows/reusable-workflow-unpinned.yml +0 -0
  300. {zizmor-1.9.0 → zizmor-1.10.0}/crates/github-actions-models/tests/sample-workflows/rnpgp-rnp-centos-and-fedora.yml +0 -0
  301. {zizmor-1.9.0 → zizmor-1.10.0}/crates/github-actions-models/tests/sample-workflows/runs-on-expr.yml +0 -0
  302. {zizmor-1.9.0 → zizmor-1.10.0}/crates/github-actions-models/tests/sample-workflows/runs-on-group-only.yml +0 -0
  303. {zizmor-1.9.0 → zizmor-1.10.0}/crates/github-actions-models/tests/sample-workflows/scalar-trigger-type.yml +0 -0
  304. {zizmor-1.9.0 → zizmor-1.10.0}/crates/github-actions-models/tests/sample-workflows/vil02-puzzle_generator-check_examples.yml +0 -0
  305. {zizmor-1.9.0 → zizmor-1.10.0}/crates/github-actions-models/tests/sample-workflows/zizmor-issue-646.yml +0 -0
  306. {zizmor-1.9.0 → zizmor-1.10.0}/crates/github-actions-models/tests/sample-workflows/zizmor-issue-650.yml +0 -0
  307. {zizmor-1.9.0 → zizmor-1.10.0}/crates/github-actions-models/tests/test_action.rs +0 -0
  308. {zizmor-1.9.0 → zizmor-1.10.0}/crates/github-actions-models/tests/test_dependabot_v2.rs +0 -0
  309. {zizmor-1.9.0 → zizmor-1.10.0}/crates/yamlpath/LICENSE +0 -0
  310. {zizmor-1.9.0 → zizmor-1.10.0}/crates/yamlpath/README.md +0 -0
  311. {zizmor-1.9.0 → zizmor-1.10.0}/crates/yamlpath/tests/testcases/basic.yml +0 -0
  312. {zizmor-1.9.0 → zizmor-1.10.0}/crates/yamlpath/tests/testcases/comments.yml +0 -0
  313. {zizmor-1.9.0 → zizmor-1.10.0}/crates/yamlpath/tests/testcases/directives.yml +0 -0
  314. {zizmor-1.9.0 → zizmor-1.10.0}/crates/yamlpath/tests/testcases/interceding-comment.yml +0 -0
  315. {zizmor-1.9.0 → zizmor-1.10.0}/crates/yamlpath/tests/testcases/quoted-key.yml +0 -0
  316. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/build.rs +0 -0
  317. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/data/codeql-injection-sinks.json +27 -27
  318. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/src/config.rs +0 -0
  319. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/src/github_api.rs +0 -0
  320. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/src/models/uses.rs +0 -0
  321. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/src/state.rs +0 -0
  322. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/common.rs +0 -0
  323. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/main.rs +0 -0
  324. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__e2e__invalid_config_file.snap +0 -0
  325. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__e2e__issue_612_repro.snap +0 -0
  326. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__cache_poisoning-14.snap +0 -0
  327. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__cache_poisoning-6.snap +0 -0
  328. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__cache_poisoning-7.snap +0 -0
  329. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__cache_poisoning.snap +0 -0
  330. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__cant_retrieve.snap +0 -0
  331. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__excessive_permissions-6.snap +0 -0
  332. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__excessive_permissions-9.snap +0 -0
  333. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__excessive_permissions.snap +0 -0
  334. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__forbidden_uses.snap +0 -0
  335. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__github_env.snap +0 -0
  336. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__insecure_commands-3.snap +0 -0
  337. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__self_hosted-2.snap +0 -0
  338. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__self_hosted-7.snap +0 -0
  339. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__self_hosted-8.snap +0 -0
  340. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__template_injection-10.snap +0 -0
  341. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__template_injection-3.snap +0 -0
  342. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__template_injection-9.snap +0 -0
  343. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__unpinned_uses-3.snap +0 -0
  344. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__unpinned_uses-4.snap +0 -0
  345. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/e2e-menagerie/.github/dummy-action-2/action.yml +0 -0
  346. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/e2e-menagerie/.gitignore +0 -0
  347. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/e2e-menagerie/README.md +0 -0
  348. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/e2e-menagerie/dummy-action-1/action.yaml +0 -0
  349. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/forbidden-uses/configs/allow-all.yml +0 -0
  350. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/forbidden-uses/configs/allow-some-refs.yml +0 -0
  351. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/forbidden-uses/configs/allow-some.yml +0 -0
  352. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/forbidden-uses/configs/deny-all.yml +0 -0
  353. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/forbidden-uses/configs/deny-some-refs.yml +0 -0
  354. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/forbidden-uses/configs/deny-some.yml +0 -0
  355. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/github-env/action.yml +0 -0
  356. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/insecure-commands/action.yml +0 -0
  357. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/invalid/bad-yaml-1.yml +0 -0
  358. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/invalid/bad-yaml-2.yml +0 -0
  359. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/invalid/blank.yml +0 -0
  360. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/invalid/comment-only.yml +0 -0
  361. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/invalid/empty-action/action.yml +0 -0
  362. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/invalid/empty.yml +0 -0
  363. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/invalid/invalid-action-1/action.yml +0 -0
  364. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/invalid/invalid-action-2/action.yml +0 -0
  365. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/invalid/invalid-workflow-2.yml +0 -0
  366. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/invalid/invalid-workflow.yml +0 -0
  367. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/issue-612-repro/action.yml +0 -0
  368. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/ref-confusion.yml +0 -0
  369. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/several-vulnerabilities.yml +0 -0
  370. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/template-injection/dataflow.yml +0 -0
  371. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/template-injection/issue-22-repro.yml +0 -0
  372. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/template-injection/issue-339-repro.yml +0 -0
  373. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/template-injection/pr-317-repro.yml +0 -0
  374. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/template-injection/pr-425-backstop/action.yml +0 -0
  375. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/template-injection/static-env.yml +0 -0
  376. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/unpinned-uses/action.yml +0 -0
  377. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/unpinned-uses/configs/composite-2.yml +0 -0
  378. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/unpinned-uses/configs/composite.yml +0 -0
  379. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/unpinned-uses/configs/empty.yml +0 -0
  380. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/unpinned-uses/configs/hash-pin-everything.yml +0 -0
  381. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/unpinned-uses/configs/invalid-policy-syntax-1.yml +0 -0
  382. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/unpinned-uses/configs/invalid-policy-syntax-2.yml +0 -0
  383. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/unpinned-uses/configs/invalid-policy-syntax-3.yml +0 -0
  384. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/unpinned-uses/configs/invalid-policy-syntax-4.yml +0 -0
  385. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/unpinned-uses/configs/invalid-policy-syntax-5.yml +0 -0
  386. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/unpinned-uses/configs/invalid-policy-syntax-6.yml +0 -0
  387. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/unpinned-uses/configs/invalid-wrong-policy-object.yml +0 -0
  388. {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/unpinned-uses/configs/ref-pin-everything.yml +0 -0
  389. {zizmor-1.9.0 → zizmor-1.10.0}/pyproject.toml +0 -0
@@ -62,9 +62,9 @@ dependencies = [
62
62
 
63
63
  [[package]]
64
64
  name = "anstream"
65
- version = "0.6.18"
65
+ version = "0.6.19"
66
66
  source = "registry+https://github.com/rust-lang/crates.io-index"
67
- checksum = "8acc5369981196006228e28809f761875c0327210a891e941f4c683b3a99529b"
67
+ checksum = "301af1932e46185686725e0fad2f8f2aa7da69dd70bf6ecc44d6b703844a3933"
68
68
  dependencies = [
69
69
  "anstyle",
70
70
  "anstyle-parse",
@@ -167,7 +167,7 @@ dependencies = [
167
167
  "miniz_oxide",
168
168
  "object",
169
169
  "rustc-demangle",
170
- "windows-targets 0.52.6",
170
+ "windows-targets",
171
171
  ]
172
172
 
173
173
  [[package]]
@@ -285,9 +285,9 @@ dependencies = [
285
285
 
286
286
  [[package]]
287
287
  name = "camino"
288
- version = "1.1.9"
288
+ version = "1.1.10"
289
289
  source = "registry+https://github.com/rust-lang/crates.io-index"
290
- checksum = "8b96ec4966b5813e2c0507c1f86115c8c5abaadc3980879c3424042a02fd1ad3"
290
+ checksum = "0da45bc31171d8d6960122e222a67740df867c1dd53b4d51caa297084c185cab"
291
291
  dependencies = [
292
292
  "serde",
293
293
  ]
@@ -315,9 +315,9 @@ checksum = "613afe47fcd5fac7ccf1db93babcb082c5994d996f20b8b159f2ad1658eb5724"
315
315
 
316
316
  [[package]]
317
317
  name = "clap"
318
- version = "4.5.38"
318
+ version = "4.5.40"
319
319
  source = "registry+https://github.com/rust-lang/crates.io-index"
320
- checksum = "ed93b9805f8ba930df42c2590f05453d5ec36cbb85d018868a5b24d31f6ac000"
320
+ checksum = "40b6887a1d8685cebccf115538db5c0efe625ccac9696ad45c409d96566e910f"
321
321
  dependencies = [
322
322
  "clap_builder",
323
323
  "clap_derive",
@@ -335,9 +335,9 @@ dependencies = [
335
335
 
336
336
  [[package]]
337
337
  name = "clap_builder"
338
- version = "4.5.38"
338
+ version = "4.5.40"
339
339
  source = "registry+https://github.com/rust-lang/crates.io-index"
340
- checksum = "379026ff283facf611b0ea629334361c4211d1b12ee01024eec1591133b04120"
340
+ checksum = "e0c66c08ce9f0c698cbce5c0279d0bb6ac936d8674174fe48f736533b964f59e"
341
341
  dependencies = [
342
342
  "anstream",
343
343
  "anstyle",
@@ -347,18 +347,18 @@ dependencies = [
347
347
 
348
348
  [[package]]
349
349
  name = "clap_complete"
350
- version = "4.5.50"
350
+ version = "4.5.54"
351
351
  source = "registry+https://github.com/rust-lang/crates.io-index"
352
- checksum = "c91d3baa3bcd889d60e6ef28874126a0b384fd225ab83aa6d8a801c519194ce1"
352
+ checksum = "aad5b1b4de04fead402672b48897030eec1f3bfe1550776322f59f6d6e6a5677"
353
353
  dependencies = [
354
354
  "clap",
355
355
  ]
356
356
 
357
357
  [[package]]
358
358
  name = "clap_complete_nushell"
359
- version = "4.5.5"
359
+ version = "4.5.7"
360
360
  source = "registry+https://github.com/rust-lang/crates.io-index"
361
- checksum = "c6a8b1593457dfc2fe539002b795710d022dc62a65bf15023f039f9760c7b18a"
361
+ checksum = "cdb8335b398d197fb3176efe9400c6c053a41733c26794316c73423d212b2f3d"
362
362
  dependencies = [
363
363
  "clap",
364
364
  "clap_complete",
@@ -366,9 +366,9 @@ dependencies = [
366
366
 
367
367
  [[package]]
368
368
  name = "clap_derive"
369
- version = "4.5.32"
369
+ version = "4.5.40"
370
370
  source = "registry+https://github.com/rust-lang/crates.io-index"
371
- checksum = "09176aae279615badda0765c0c0b3f6ed53f4709118af73cf4655d85d1530cd7"
371
+ checksum = "d2c7947ae4cc3d851207c1adb5b5e260ff0cca11446b1d6d1423788e442257ce"
372
372
  dependencies = [
373
373
  "heck",
374
374
  "proc-macro2",
@@ -602,9 +602,9 @@ dependencies = [
602
602
 
603
603
  [[package]]
604
604
  name = "flate2"
605
- version = "1.1.1"
605
+ version = "1.1.2"
606
606
  source = "registry+https://github.com/rust-lang/crates.io-index"
607
- checksum = "7ced92e76e966ca2fd84c8f7aa01a4aea65b0eb6648d72f7c8f3e2764a67fece"
607
+ checksum = "4a3d7db9596fecd151c5f638c0ee5d5bd487b6e0ea232e5dc96d5250f6f94b1d"
608
608
  dependencies = [
609
609
  "crc32fast",
610
610
  "miniz_oxide",
@@ -786,7 +786,7 @@ checksum = "07e28edb80900c19c28f1072f2e8aeca7fa06b23cd4169cefe1af5aa3260783f"
786
786
 
787
787
  [[package]]
788
788
  name = "github-actions-expressions"
789
- version = "0.0.4"
789
+ version = "0.0.7"
790
790
  dependencies = [
791
791
  "anyhow",
792
792
  "itertools",
@@ -797,11 +797,12 @@ dependencies = [
797
797
 
798
798
  [[package]]
799
799
  name = "github-actions-models"
800
- version = "0.29.0"
800
+ version = "0.31.0"
801
801
  dependencies = [
802
802
  "indexmap",
803
803
  "serde",
804
804
  "serde_yaml",
805
+ "tracing",
805
806
  ]
806
807
 
807
808
  [[package]]
@@ -995,22 +996,26 @@ dependencies = [
995
996
  "tokio",
996
997
  "tokio-rustls",
997
998
  "tower-service",
998
- "webpki-roots",
999
+ "webpki-roots 0.26.9",
999
1000
  ]
1000
1001
 
1001
1002
  [[package]]
1002
1003
  name = "hyper-util"
1003
- version = "0.1.11"
1004
+ version = "0.1.13"
1004
1005
  source = "registry+https://github.com/rust-lang/crates.io-index"
1005
- checksum = "497bbc33a26fdd4af9ed9c70d63f61cf56a938375fbb32df34db9b1cd6d643f2"
1006
+ checksum = "b1c293b6b3d21eca78250dc7dbebd6b9210ec5530e038cbfe0661b5c47ab06e8"
1006
1007
  dependencies = [
1008
+ "base64 0.22.1",
1007
1009
  "bytes",
1008
1010
  "futures-channel",
1011
+ "futures-core",
1009
1012
  "futures-util",
1010
1013
  "http",
1011
1014
  "http-body",
1012
1015
  "hyper",
1016
+ "ipnet",
1013
1017
  "libc",
1018
+ "percent-encoding",
1014
1019
  "pin-project-lite",
1015
1020
  "socket2",
1016
1021
  "tokio",
@@ -1224,6 +1229,16 @@ version = "2.11.0"
1224
1229
  source = "registry+https://github.com/rust-lang/crates.io-index"
1225
1230
  checksum = "469fb0b9cefa57e3ef31275ee7cacb78f2fdca44e4765491884a2b119d4eb130"
1226
1231
 
1232
+ [[package]]
1233
+ name = "iri-string"
1234
+ version = "0.7.8"
1235
+ source = "registry+https://github.com/rust-lang/crates.io-index"
1236
+ checksum = "dbc5ebe9c3a1a7a5127f920a418f7585e9e758e911d0466ed004f393b0e380b2"
1237
+ dependencies = [
1238
+ "memchr",
1239
+ "serde",
1240
+ ]
1241
+
1227
1242
  [[package]]
1228
1243
  name = "is_terminal_polyfill"
1229
1244
  version = "1.70.1"
@@ -1390,12 +1405,6 @@ dependencies = [
1390
1405
  "syn 2.0.101",
1391
1406
  ]
1392
1407
 
1393
- [[package]]
1394
- name = "mime"
1395
- version = "0.3.17"
1396
- source = "registry+https://github.com/rust-lang/crates.io-index"
1397
- checksum = "6877bb514081ee2a7ff5ef9de3281f14a4dd4bceac4c09388074a6b5df8a139a"
1398
-
1399
1408
  [[package]]
1400
1409
  name = "minimal-lexical"
1401
1410
  version = "0.2.1"
@@ -1603,7 +1612,7 @@ dependencies = [
1603
1612
  "libc",
1604
1613
  "redox_syscall",
1605
1614
  "smallvec",
1606
- "windows-targets 0.52.6",
1615
+ "windows-targets",
1607
1616
  ]
1608
1617
 
1609
1618
  [[package]]
@@ -1614,9 +1623,9 @@ checksum = "e3148f5046208a5d56bcfc03053e3ca6334e51da8dfb19b6cdc8b306fae3283e"
1614
1623
 
1615
1624
  [[package]]
1616
1625
  name = "pest"
1617
- version = "2.8.0"
1626
+ version = "2.8.1"
1618
1627
  source = "registry+https://github.com/rust-lang/crates.io-index"
1619
- checksum = "198db74531d58c70a361c42201efde7e2591e976d518caf7662a47dc5720e7b6"
1628
+ checksum = "1db05f56d34358a8b1066f67cbb203ee3e7ed2ba674a6263a1d5ec6db2204323"
1620
1629
  dependencies = [
1621
1630
  "memchr",
1622
1631
  "thiserror 2.0.12",
@@ -1625,9 +1634,9 @@ dependencies = [
1625
1634
 
1626
1635
  [[package]]
1627
1636
  name = "pest_derive"
1628
- version = "2.8.0"
1637
+ version = "2.8.1"
1629
1638
  source = "registry+https://github.com/rust-lang/crates.io-index"
1630
- checksum = "d725d9cfd79e87dccc9341a2ef39d1b6f6353d68c4b33c177febbe1a402c97c5"
1639
+ checksum = "bb056d9e8ea77922845ec74a1c4e8fb17e7c218cc4fc11a15c5d25e189aa40bc"
1631
1640
  dependencies = [
1632
1641
  "pest",
1633
1642
  "pest_generator",
@@ -1635,9 +1644,9 @@ dependencies = [
1635
1644
 
1636
1645
  [[package]]
1637
1646
  name = "pest_generator"
1638
- version = "2.8.0"
1647
+ version = "2.8.1"
1639
1648
  source = "registry+https://github.com/rust-lang/crates.io-index"
1640
- checksum = "db7d01726be8ab66ab32f9df467ae8b1148906685bbe75c82d1e65d7f5b3f841"
1649
+ checksum = "87e404e638f781eb3202dc82db6760c8ae8a1eeef7fb3fa8264b2ef280504966"
1641
1650
  dependencies = [
1642
1651
  "pest",
1643
1652
  "pest_meta",
@@ -1648,11 +1657,10 @@ dependencies = [
1648
1657
 
1649
1658
  [[package]]
1650
1659
  name = "pest_meta"
1651
- version = "2.8.0"
1660
+ version = "2.8.1"
1652
1661
  source = "registry+https://github.com/rust-lang/crates.io-index"
1653
- checksum = "7f9f832470494906d1fca5329f8ab5791cc60beb230c74815dff541cbd2b5ca0"
1662
+ checksum = "edd1101f170f5903fde0914f899bb503d9ff5271d7ba76bbb70bea63690cc0d5"
1654
1663
  dependencies = [
1655
- "once_cell",
1656
1664
  "pest",
1657
1665
  "sha2",
1658
1666
  ]
@@ -1945,9 +1953,9 @@ checksum = "2b15c43186be67a4fd63bee50d0303afffcef381492ebe2c5d87f324e1b8815c"
1945
1953
 
1946
1954
  [[package]]
1947
1955
  name = "reqwest"
1948
- version = "0.12.15"
1956
+ version = "0.12.20"
1949
1957
  source = "registry+https://github.com/rust-lang/crates.io-index"
1950
- checksum = "d19c46a6fdd48bc4dab94b6103fccc55d34c67cc0ad04653aad4ea2a07cd7bbb"
1958
+ checksum = "eabf4c97d9130e2bf606614eb937e86edac8292eaa6f422f995d7e8de1eb1813"
1951
1959
  dependencies = [
1952
1960
  "base64 0.22.1",
1953
1961
  "bytes",
@@ -1960,16 +1968,12 @@ dependencies = [
1960
1968
  "hyper",
1961
1969
  "hyper-rustls",
1962
1970
  "hyper-util",
1963
- "ipnet",
1964
1971
  "js-sys",
1965
1972
  "log",
1966
- "mime",
1967
- "once_cell",
1968
1973
  "percent-encoding",
1969
1974
  "pin-project-lite",
1970
1975
  "quinn",
1971
1976
  "rustls",
1972
- "rustls-pemfile",
1973
1977
  "rustls-pki-types",
1974
1978
  "serde",
1975
1979
  "serde_json",
@@ -1978,13 +1982,13 @@ dependencies = [
1978
1982
  "tokio",
1979
1983
  "tokio-rustls",
1980
1984
  "tower",
1985
+ "tower-http",
1981
1986
  "tower-service",
1982
1987
  "url",
1983
1988
  "wasm-bindgen",
1984
1989
  "wasm-bindgen-futures",
1985
1990
  "web-sys",
1986
- "webpki-roots",
1987
- "windows-registry",
1991
+ "webpki-roots 1.0.0",
1988
1992
  ]
1989
1993
 
1990
1994
  [[package]]
@@ -2055,15 +2059,6 @@ dependencies = [
2055
2059
  "zeroize",
2056
2060
  ]
2057
2061
 
2058
- [[package]]
2059
- name = "rustls-pemfile"
2060
- version = "2.2.0"
2061
- source = "registry+https://github.com/rust-lang/crates.io-index"
2062
- checksum = "dce314e5fee3f39953d46bb63bb8a46d40c2f8fb7cc5a3b6cab2bde9721d6e50"
2063
- dependencies = [
2064
- "rustls-pki-types",
2065
- ]
2066
-
2067
2062
  [[package]]
2068
2063
  name = "rustls-pki-types"
2069
2064
  version = "1.11.0"
@@ -2707,6 +2702,24 @@ dependencies = [
2707
2702
  "tower-service",
2708
2703
  ]
2709
2704
 
2705
+ [[package]]
2706
+ name = "tower-http"
2707
+ version = "0.6.5"
2708
+ source = "registry+https://github.com/rust-lang/crates.io-index"
2709
+ checksum = "5cc2d9e086a412a451384326f521c8123a99a466b329941a9403696bff9b0da2"
2710
+ dependencies = [
2711
+ "bitflags",
2712
+ "bytes",
2713
+ "futures-util",
2714
+ "http",
2715
+ "http-body",
2716
+ "iri-string",
2717
+ "pin-project-lite",
2718
+ "tower",
2719
+ "tower-layer",
2720
+ "tower-service",
2721
+ ]
2722
+
2710
2723
  [[package]]
2711
2724
  name = "tower-layer"
2712
2725
  version = "0.3.3"
@@ -2794,9 +2807,9 @@ dependencies = [
2794
2807
 
2795
2808
  [[package]]
2796
2809
  name = "tree-sitter"
2797
- version = "0.25.4"
2810
+ version = "0.25.6"
2798
2811
  source = "registry+https://github.com/rust-lang/crates.io-index"
2799
- checksum = "69aff09fea9a41fb061ae6b206cb87cac1b8db07df31be3ba271fbc26760f213"
2812
+ checksum = "a7cf18d43cbf0bfca51f657132cc616a5097edc4424d538bae6fa60142eaf9f0"
2800
2813
  dependencies = [
2801
2814
  "cc",
2802
2815
  "regex",
@@ -2824,9 +2837,9 @@ checksum = "c4013970217383f67b18aef68f6fb2e8d409bc5755227092d32efb0422ba24b8"
2824
2837
 
2825
2838
  [[package]]
2826
2839
  name = "tree-sitter-powershell"
2827
- version = "0.25.2"
2840
+ version = "0.25.6"
2828
2841
  source = "registry+https://github.com/rust-lang/crates.io-index"
2829
- checksum = "377974a9bbd11ef11aa298d60def669f78b579d11745066a59bc4167e53d360b"
2842
+ checksum = "e265a36be4ab388c842629bef61fb719c83f9be3241db92288d064ed425758ba"
2830
2843
  dependencies = [
2831
2844
  "cc",
2832
2845
  "tree-sitter-language",
@@ -3164,6 +3177,15 @@ dependencies = [
3164
3177
  "rustls-pki-types",
3165
3178
  ]
3166
3179
 
3180
+ [[package]]
3181
+ name = "webpki-roots"
3182
+ version = "1.0.0"
3183
+ source = "registry+https://github.com/rust-lang/crates.io-index"
3184
+ checksum = "2853738d1cc4f2da3a225c18ec6c3721abb31961096e9dbf5ab35fa88b19cfdb"
3185
+ dependencies = [
3186
+ "rustls-pki-types",
3187
+ ]
3188
+
3167
3189
  [[package]]
3168
3190
  name = "winapi"
3169
3191
  version = "0.3.9"
@@ -3227,7 +3249,7 @@ dependencies = [
3227
3249
  "windows-interface",
3228
3250
  "windows-link",
3229
3251
  "windows-result",
3230
- "windows-strings 0.4.0",
3252
+ "windows-strings",
3231
3253
  ]
3232
3254
 
3233
3255
  [[package]]
@@ -3278,17 +3300,6 @@ dependencies = [
3278
3300
  "windows-link",
3279
3301
  ]
3280
3302
 
3281
- [[package]]
3282
- name = "windows-registry"
3283
- version = "0.4.0"
3284
- source = "registry+https://github.com/rust-lang/crates.io-index"
3285
- checksum = "4286ad90ddb45071efd1a66dfa43eb02dd0dfbae1545ad6cc3c51cf34d7e8ba3"
3286
- dependencies = [
3287
- "windows-result",
3288
- "windows-strings 0.3.1",
3289
- "windows-targets 0.53.0",
3290
- ]
3291
-
3292
3303
  [[package]]
3293
3304
  name = "windows-result"
3294
3305
  version = "0.3.2"
@@ -3298,15 +3309,6 @@ dependencies = [
3298
3309
  "windows-link",
3299
3310
  ]
3300
3311
 
3301
- [[package]]
3302
- name = "windows-strings"
3303
- version = "0.3.1"
3304
- source = "registry+https://github.com/rust-lang/crates.io-index"
3305
- checksum = "87fa48cc5d406560701792be122a10132491cff9d0aeb23583cc2dcafc847319"
3306
- dependencies = [
3307
- "windows-link",
3308
- ]
3309
-
3310
3312
  [[package]]
3311
3313
  name = "windows-strings"
3312
3314
  version = "0.4.0"
@@ -3322,7 +3324,7 @@ version = "0.52.0"
3322
3324
  source = "registry+https://github.com/rust-lang/crates.io-index"
3323
3325
  checksum = "282be5f36a8ce781fad8c8ae18fa3f9beff57ec1b52cb3de0789201425d9a33d"
3324
3326
  dependencies = [
3325
- "windows-targets 0.52.6",
3327
+ "windows-targets",
3326
3328
  ]
3327
3329
 
3328
3330
  [[package]]
@@ -3331,7 +3333,7 @@ version = "0.59.0"
3331
3333
  source = "registry+https://github.com/rust-lang/crates.io-index"
3332
3334
  checksum = "1e38bc4d79ed67fd075bcc251a1c39b32a1776bbe92e5bef1f0bf1f8c531853b"
3333
3335
  dependencies = [
3334
- "windows-targets 0.52.6",
3336
+ "windows-targets",
3335
3337
  ]
3336
3338
 
3337
3339
  [[package]]
@@ -3340,30 +3342,14 @@ version = "0.52.6"
3340
3342
  source = "registry+https://github.com/rust-lang/crates.io-index"
3341
3343
  checksum = "9b724f72796e036ab90c1021d4780d4d3d648aca59e491e6b98e725b84e99973"
3342
3344
  dependencies = [
3343
- "windows_aarch64_gnullvm 0.52.6",
3344
- "windows_aarch64_msvc 0.52.6",
3345
- "windows_i686_gnu 0.52.6",
3346
- "windows_i686_gnullvm 0.52.6",
3347
- "windows_i686_msvc 0.52.6",
3348
- "windows_x86_64_gnu 0.52.6",
3349
- "windows_x86_64_gnullvm 0.52.6",
3350
- "windows_x86_64_msvc 0.52.6",
3351
- ]
3352
-
3353
- [[package]]
3354
- name = "windows-targets"
3355
- version = "0.53.0"
3356
- source = "registry+https://github.com/rust-lang/crates.io-index"
3357
- checksum = "b1e4c7e8ceaaf9cb7d7507c974735728ab453b67ef8f18febdd7c11fe59dca8b"
3358
- dependencies = [
3359
- "windows_aarch64_gnullvm 0.53.0",
3360
- "windows_aarch64_msvc 0.53.0",
3361
- "windows_i686_gnu 0.53.0",
3362
- "windows_i686_gnullvm 0.53.0",
3363
- "windows_i686_msvc 0.53.0",
3364
- "windows_x86_64_gnu 0.53.0",
3365
- "windows_x86_64_gnullvm 0.53.0",
3366
- "windows_x86_64_msvc 0.53.0",
3345
+ "windows_aarch64_gnullvm",
3346
+ "windows_aarch64_msvc",
3347
+ "windows_i686_gnu",
3348
+ "windows_i686_gnullvm",
3349
+ "windows_i686_msvc",
3350
+ "windows_x86_64_gnu",
3351
+ "windows_x86_64_gnullvm",
3352
+ "windows_x86_64_msvc",
3367
3353
  ]
3368
3354
 
3369
3355
  [[package]]
@@ -3372,96 +3358,48 @@ version = "0.52.6"
3372
3358
  source = "registry+https://github.com/rust-lang/crates.io-index"
3373
3359
  checksum = "32a4622180e7a0ec044bb555404c800bc9fd9ec262ec147edd5989ccd0c02cd3"
3374
3360
 
3375
- [[package]]
3376
- name = "windows_aarch64_gnullvm"
3377
- version = "0.53.0"
3378
- source = "registry+https://github.com/rust-lang/crates.io-index"
3379
- checksum = "86b8d5f90ddd19cb4a147a5fa63ca848db3df085e25fee3cc10b39b6eebae764"
3380
-
3381
3361
  [[package]]
3382
3362
  name = "windows_aarch64_msvc"
3383
3363
  version = "0.52.6"
3384
3364
  source = "registry+https://github.com/rust-lang/crates.io-index"
3385
3365
  checksum = "09ec2a7bb152e2252b53fa7803150007879548bc709c039df7627cabbd05d469"
3386
3366
 
3387
- [[package]]
3388
- name = "windows_aarch64_msvc"
3389
- version = "0.53.0"
3390
- source = "registry+https://github.com/rust-lang/crates.io-index"
3391
- checksum = "c7651a1f62a11b8cbd5e0d42526e55f2c99886c77e007179efff86c2b137e66c"
3392
-
3393
3367
  [[package]]
3394
3368
  name = "windows_i686_gnu"
3395
3369
  version = "0.52.6"
3396
3370
  source = "registry+https://github.com/rust-lang/crates.io-index"
3397
3371
  checksum = "8e9b5ad5ab802e97eb8e295ac6720e509ee4c243f69d781394014ebfe8bbfa0b"
3398
3372
 
3399
- [[package]]
3400
- name = "windows_i686_gnu"
3401
- version = "0.53.0"
3402
- source = "registry+https://github.com/rust-lang/crates.io-index"
3403
- checksum = "c1dc67659d35f387f5f6c479dc4e28f1d4bb90ddd1a5d3da2e5d97b42d6272c3"
3404
-
3405
3373
  [[package]]
3406
3374
  name = "windows_i686_gnullvm"
3407
3375
  version = "0.52.6"
3408
3376
  source = "registry+https://github.com/rust-lang/crates.io-index"
3409
3377
  checksum = "0eee52d38c090b3caa76c563b86c3a4bd71ef1a819287c19d586d7334ae8ed66"
3410
3378
 
3411
- [[package]]
3412
- name = "windows_i686_gnullvm"
3413
- version = "0.53.0"
3414
- source = "registry+https://github.com/rust-lang/crates.io-index"
3415
- checksum = "9ce6ccbdedbf6d6354471319e781c0dfef054c81fbc7cf83f338a4296c0cae11"
3416
-
3417
3379
  [[package]]
3418
3380
  name = "windows_i686_msvc"
3419
3381
  version = "0.52.6"
3420
3382
  source = "registry+https://github.com/rust-lang/crates.io-index"
3421
3383
  checksum = "240948bc05c5e7c6dabba28bf89d89ffce3e303022809e73deaefe4f6ec56c66"
3422
3384
 
3423
- [[package]]
3424
- name = "windows_i686_msvc"
3425
- version = "0.53.0"
3426
- source = "registry+https://github.com/rust-lang/crates.io-index"
3427
- checksum = "581fee95406bb13382d2f65cd4a908ca7b1e4c2f1917f143ba16efe98a589b5d"
3428
-
3429
3385
  [[package]]
3430
3386
  name = "windows_x86_64_gnu"
3431
3387
  version = "0.52.6"
3432
3388
  source = "registry+https://github.com/rust-lang/crates.io-index"
3433
3389
  checksum = "147a5c80aabfbf0c7d901cb5895d1de30ef2907eb21fbbab29ca94c5b08b1a78"
3434
3390
 
3435
- [[package]]
3436
- name = "windows_x86_64_gnu"
3437
- version = "0.53.0"
3438
- source = "registry+https://github.com/rust-lang/crates.io-index"
3439
- checksum = "2e55b5ac9ea33f2fc1716d1742db15574fd6fc8dadc51caab1c16a3d3b4190ba"
3440
-
3441
3391
  [[package]]
3442
3392
  name = "windows_x86_64_gnullvm"
3443
3393
  version = "0.52.6"
3444
3394
  source = "registry+https://github.com/rust-lang/crates.io-index"
3445
3395
  checksum = "24d5b23dc417412679681396f2b49f3de8c1473deb516bd34410872eff51ed0d"
3446
3396
 
3447
- [[package]]
3448
- name = "windows_x86_64_gnullvm"
3449
- version = "0.53.0"
3450
- source = "registry+https://github.com/rust-lang/crates.io-index"
3451
- checksum = "0a6e035dd0599267ce1ee132e51c27dd29437f63325753051e71dd9e42406c57"
3452
-
3453
3397
  [[package]]
3454
3398
  name = "windows_x86_64_msvc"
3455
3399
  version = "0.52.6"
3456
3400
  source = "registry+https://github.com/rust-lang/crates.io-index"
3457
3401
  checksum = "589f6da84c646204747d1270a2a5661ea66ed1cced2631d546fdfb155959f9ec"
3458
3402
 
3459
- [[package]]
3460
- name = "windows_x86_64_msvc"
3461
- version = "0.53.0"
3462
- source = "registry+https://github.com/rust-lang/crates.io-index"
3463
- checksum = "271414315aff87387382ec3d271b52d7ae78726f5d44ac98b4f4030c91880486"
3464
-
3465
3403
  [[package]]
3466
3404
  name = "wit-bindgen-rt"
3467
3405
  version = "0.39.0"
@@ -3501,8 +3439,9 @@ checksum = "fdd20c5420375476fbd4394763288da7eb0cc0b8c11deed431a91562af7335d3"
3501
3439
 
3502
3440
  [[package]]
3503
3441
  name = "yamlpath"
3504
- version = "0.19.0"
3442
+ version = "0.23.0"
3505
3443
  dependencies = [
3444
+ "line-index",
3506
3445
  "serde",
3507
3446
  "serde_yaml",
3508
3447
  "thiserror 2.0.12",
@@ -3631,7 +3570,7 @@ dependencies = [
3631
3570
 
3632
3571
  [[package]]
3633
3572
  name = "zizmor"
3634
- version = "1.9.0"
3573
+ version = "1.10.0"
3635
3574
  dependencies = [
3636
3575
  "annotate-snippets",
3637
3576
  "anstream",
@@ -11,23 +11,23 @@ license = "MIT"
11
11
 
12
12
  [workspace.dependencies]
13
13
  anyhow = "1.0.98"
14
- github-actions-expressions = { path = "crates/github-actions-expressions", version = "0.0.4" }
15
- github-actions-models = { path = "crates/github-actions-models", version = "0.29.0" }
14
+ github-actions-expressions = { path = "crates/github-actions-expressions", version = "0.0.7" }
15
+ github-actions-models = { path = "crates/github-actions-models", version = "0.31.0" }
16
16
  itertools = "0.14.0"
17
- pest = "2.8.0"
18
- pest_derive = "2.8.0"
17
+ pest = "2.8.1"
18
+ pest_derive = "2.8.1"
19
19
  pretty_assertions = "1.4.1"
20
20
  annotate-snippets = "0.11.5"
21
- anstream = "0.6.18"
21
+ anstream = "0.6.19"
22
22
  assert_cmd = "2.0.17"
23
- camino = "1.1.9"
24
- clap = "4.5.38"
23
+ camino = "1.1.10"
24
+ clap = "4.5.40"
25
25
  clap-verbosity-flag = { version = "3.0.3", default-features = false }
26
- clap_complete = "4.5.50"
27
- clap_complete_nushell = "4.5.5"
26
+ clap_complete = "4.5.54"
27
+ clap_complete_nushell = "4.5.7"
28
28
  csv = "1.3.1"
29
29
  etcetera = "0.10.0"
30
- flate2 = "1.1.1"
30
+ flate2 = "1.1.2"
31
31
  fst = "0.4.7"
32
32
  http-cache-reqwest = "0.15.1"
33
33
  human-panic = "2.0.1"
@@ -39,7 +39,7 @@ jsonschema = "0.30.0"
39
39
  line-index = "0.1.2"
40
40
  owo-colors = "4.2.1"
41
41
  regex = "1.11.1"
42
- reqwest = { version = "0.12.15", default-features = false }
42
+ reqwest = { version = "0.12.20", default-features = false }
43
43
  reqwest-middleware = "0.4.2"
44
44
  serde = { version = "1.0.219", features = ["derive"] }
45
45
  serde-sarif = "0.8.0"
@@ -53,12 +53,20 @@ tokio = "1.45.1"
53
53
  tracing = "0.1.41"
54
54
  tracing-indicatif = "0.3.9"
55
55
  tracing-subscriber = "0.3.19"
56
- tree-sitter = "0.25.4"
56
+ tree-sitter = "0.25.6"
57
57
  tree-sitter-bash = "0.23.3"
58
- tree-sitter-powershell = "0.25.2"
59
- yamlpath = { path = "crates/yamlpath", version = "0.19.0" }
58
+ tree-sitter-powershell = "0.25.6"
59
+ yamlpath = { path = "crates/yamlpath", version = "0.23.0" }
60
60
  tree-sitter-yaml = "0.7.1"
61
61
 
62
+ [workspace.lints.clippy]
63
+ dbg_macro = "warn"
64
+ todo = "warn"
65
+ unimplemented = "warn"
66
+ use_debug = "warn"
67
+ needless_lifetimes = "warn"
68
+ print_stderr = "warn"
69
+ print_stdout = "warn"
62
70
 
63
71
  [profile.dev.package]
64
72
  insta.opt-level = 3
@@ -1,6 +1,6 @@
1
1
  Metadata-Version: 2.4
2
2
  Name: zizmor
3
- Version: 1.9.0
3
+ Version: 1.10.0
4
4
  License-File: LICENSE
5
5
  Summary: Static analysis for GitHub Actions
6
6
  Keywords: cli,github-actions,static-analysis,security
@@ -77,6 +77,20 @@ See [our contributing guide!](./CONTRIBUTING.md)
77
77
  Astral
78
78
  </a>
79
79
  </td>
80
+ <td align="center" valign="top" width="15%">
81
+ <a href="https://grafana.com/">
82
+ <img src="https://avatars.githubusercontent.com/u/7195757?s=100&v=4" width="100px">
83
+ <br>
84
+ Grafana Labs
85
+ </a>
86
+ </td>
87
+ <td align="center" valign="top" width="15%">
88
+ <a href="https://trailofbits.com/">
89
+ <img src="https://avatars.githubusercontent.com/u/2314423?s=100&v=4" width="100px">
90
+ <br>
91
+ Trail of Bits
92
+ </a>
93
+ </td>
80
94
  </tr>
81
95
  </tbody>
82
96
  </table>
@@ -2,7 +2,7 @@
2
2
  name = "github-actions-expressions"
3
3
  description = "GitHub Actions expression parser and data types"
4
4
  repository = "https://github.com/zizmorcore/zizmor/tree/main/crates/github-actions-expressions"
5
- version = "0.0.4"
5
+ version = "0.0.7"
6
6
  readme = "README.md"
7
7
 
8
8
  homepage.workspace = true
@@ -10,6 +10,9 @@ license.workspace = true
10
10
  authors.workspace = true
11
11
  edition.workspace = true
12
12
 
13
+ [lints]
14
+ workspace = true
15
+
13
16
  [dependencies]
14
17
  anyhow.workspace = true
15
18
  pest.workspace = true