zizmor 1.9.0__tar.gz → 1.10.0__tar.gz
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Potentially problematic release.
This version of zizmor might be problematic. Click here for more details.
- {zizmor-1.9.0 → zizmor-1.10.0}/Cargo.lock +95 -156
- {zizmor-1.9.0 → zizmor-1.10.0}/Cargo.toml +22 -14
- {zizmor-1.9.0 → zizmor-1.10.0}/PKG-INFO +15 -1
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/github-actions-expressions/Cargo.toml +4 -1
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/github-actions-expressions/src/context.rs +129 -74
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/github-actions-expressions/src/expr.pest +2 -2
- zizmor-1.10.0/crates/github-actions-expressions/src/lib.rs +1390 -0
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/github-actions-models/Cargo.toml +5 -1
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/github-actions-models/src/action.rs +5 -5
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/github-actions-models/src/common/expr.rs +15 -7
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/github-actions-models/src/common.rs +18 -4
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/github-actions-models/src/workflow/event.rs +25 -4
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/github-actions-models/src/workflow/job.rs +7 -7
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/github-actions-models/tests/sample-workflows/homebrew-core-dispatch-rebottle.yml +9 -9
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/github-actions-models/tests/test_workflow.rs +0 -2
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/yamlpath/Cargo.toml +5 -1
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/yamlpath/src/lib.rs +377 -31
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/yamlpath/tests/integration_test.rs +16 -4
- zizmor-1.10.0/crates/yamlpath/tests/testcases/exact-features.yml +88 -0
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/yamlpath/tests/testcases/flow.yml +21 -2
- zizmor-1.10.0/crates/yamlpath/tests/testcases/key-only-features.yml +32 -0
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/Cargo.toml +5 -2
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/README.md +14 -0
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/data/context-capabilities.csv +23 -12
- zizmor-1.10.0/crates/zizmor/src/audit/anonymous_definition.rs +65 -0
- zizmor-1.10.0/crates/zizmor/src/audit/artipacked.rs +359 -0
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/src/audit/bot_conditions.rs +86 -38
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/src/audit/cache_poisoning.rs +3 -1
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/src/audit/dangerous_triggers.rs +1 -1
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/src/audit/excessive_permissions.rs +3 -3
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/src/audit/forbidden_uses.rs +1 -1
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/src/audit/github_env.rs +2 -1
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/src/audit/hardcoded_container_credentials.rs +2 -3
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/src/audit/impostor_commit.rs +2 -2
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/src/audit/insecure_commands.rs +6 -6
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/src/audit/known_vulnerable_actions.rs +1 -1
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/src/audit/mod.rs +9 -8
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/src/audit/obfuscation.rs +40 -10
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/src/audit/overprovisioned_secrets.rs +24 -14
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/src/audit/ref_confusion.rs +3 -2
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/src/audit/secrets_inherit.rs +4 -1
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/src/audit/self_hosted_runner.rs +2 -3
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/src/audit/stale_action_refs.rs +2 -2
- zizmor-1.10.0/crates/zizmor/src/audit/template_injection.rs +1098 -0
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/src/audit/unpinned_images.rs +5 -2
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/src/audit/unpinned_uses.rs +1 -1
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/src/audit/unredacted_secrets.rs +9 -7
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/src/audit/unsound_contains.rs +24 -15
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/src/audit/use_trusted_publishing.rs +63 -54
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/src/data/github-action.json +695 -695
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/src/data/github-workflow.json +1742 -1715
- zizmor-1.10.0/crates/zizmor/src/finding/location.rs +690 -0
- zizmor-1.10.0/crates/zizmor/src/finding.rs +298 -0
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/src/main.rs +57 -3
- zizmor-1.10.0/crates/zizmor/src/models/action.rs +233 -0
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/src/models/coordinate.rs +75 -78
- zizmor-1.10.0/crates/zizmor/src/models/inputs.rs +40 -0
- zizmor-1.9.0/crates/zizmor/src/models.rs → zizmor-1.10.0/crates/zizmor/src/models/workflow.rs +224 -365
- zizmor-1.10.0/crates/zizmor/src/models.rs +63 -0
- zizmor-1.10.0/crates/zizmor/src/output/fix.rs +141 -0
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/src/output/github.rs +1 -4
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/src/output/mod.rs +1 -0
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/src/output/plain.rs +17 -2
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/src/output/sarif.rs +16 -15
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/src/registry.rs +34 -10
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/src/utils.rs +392 -26
- zizmor-1.10.0/crates/zizmor/src/yaml_patch/mod.rs +3328 -0
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/acceptance.rs +15 -0
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/e2e.rs +29 -0
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshot.rs +62 -0
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__e2e__gha_hazmat.snap +70 -56
- zizmor-1.10.0/crates/zizmor/tests/integration/snapshots/integration__e2e__invalid_input_not_strict-2.snap +7 -0
- zizmor-1.10.0/crates/zizmor/tests/integration/snapshots/integration__e2e__invalid_input_not_strict.snap +7 -0
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__e2e__invalid_inputs-10.snap +3 -4
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__e2e__invalid_inputs-2.snap +3 -4
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__e2e__invalid_inputs-3.snap +3 -4
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__e2e__invalid_inputs-4.snap +3 -4
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__e2e__invalid_inputs-5.snap +3 -4
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__e2e__invalid_inputs-6.snap +3 -4
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__e2e__invalid_inputs-7.snap +3 -4
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__e2e__invalid_inputs-8.snap +3 -4
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__e2e__invalid_inputs-9.snap +3 -4
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__e2e__invalid_inputs.snap +3 -4
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__e2e__issue_569.snap +3 -3
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__e2e__issue_726.snap +2 -2
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__e2e__menagerie-2.snap +1 -1
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__e2e__menagerie.snap +1 -1
- zizmor-1.10.0/crates/zizmor/tests/integration/snapshots/integration__e2e__pr_960_backstop.snap +11 -0
- zizmor-1.10.0/crates/zizmor/tests/integration/snapshots/integration__snapshot__anonymous_definition-2.snap +28 -0
- zizmor-1.10.0/crates/zizmor/tests/integration/snapshots/integration__snapshot__anonymous_definition.snap +28 -0
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__artipacked-2.snap +5 -4
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__artipacked-3.snap +10 -8
- zizmor-1.10.0/crates/zizmor/tests/integration/snapshots/integration__snapshot__artipacked-4.snap +19 -0
- zizmor-1.10.0/crates/zizmor/tests/integration/snapshots/integration__snapshot__artipacked-5.snap +29 -0
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__artipacked.snap +5 -4
- zizmor-1.10.0/crates/zizmor/tests/integration/snapshots/integration__snapshot__bot_conditions.snap +139 -0
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__cache_poisoning-10.snap +6 -6
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__cache_poisoning-11.snap +13 -13
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__cache_poisoning-12.snap +2 -2
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__cache_poisoning-13.snap +2 -2
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__cache_poisoning-15.snap +8 -8
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__cache_poisoning-2.snap +2 -2
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__cache_poisoning-3.snap +4 -4
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__cache_poisoning-4.snap +5 -5
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__cache_poisoning-5.snap +6 -6
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__cache_poisoning-8.snap +2 -2
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__cache_poisoning-9.snap +6 -6
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__excessive_permissions-10.snap +7 -7
- zizmor-1.10.0/crates/zizmor/tests/integration/snapshots/integration__snapshot__excessive_permissions-11.snap +19 -0
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__excessive_permissions-12.snap +12 -11
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__excessive_permissions-2.snap +3 -3
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__excessive_permissions-3.snap +8 -8
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__excessive_permissions-4.snap +3 -3
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__excessive_permissions-5.snap +3 -3
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__excessive_permissions-7.snap +19 -17
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__excessive_permissions-8.snap +7 -7
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__forbidden_uses-2.snap +7 -7
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__forbidden_uses-3.snap +3 -3
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__forbidden_uses-4.snap +5 -5
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__forbidden_uses-5.snap +5 -6
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__forbidden_uses-6.snap +3 -4
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__github_env-2.snap +5 -5
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__github_env-3.snap +5 -5
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__github_output.snap +2 -2
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__insecure_commands-2.snap +3 -3
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__insecure_commands-4.snap +5 -5
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__insecure_commands.snap +5 -5
- zizmor-1.10.0/crates/zizmor/tests/integration/snapshots/integration__snapshot__obfuscation-2.snap +13 -0
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__obfuscation.snap +62 -62
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__overprovisioned_secrets.snap +5 -5
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__ref_confusion-2.snap +3 -3
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__ref_confusion.snap +2 -2
- zizmor-1.10.0/crates/zizmor/tests/integration/snapshots/integration__snapshot__secrets_inherit.snap +16 -0
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__self_hosted-3.snap +7 -7
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__self_hosted-4.snap +8 -8
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__self_hosted-5.snap +7 -7
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__self_hosted-6.snap +9 -9
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__self_hosted.snap +3 -3
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__stale_action_refs.snap +3 -3
- zizmor-1.10.0/crates/zizmor/tests/integration/snapshots/integration__snapshot__template_injection-11.snap +18 -0
- zizmor-1.10.0/crates/zizmor/tests/integration/snapshots/integration__snapshot__template_injection-12.snap +18 -0
- zizmor-1.10.0/crates/zizmor/tests/integration/snapshots/integration__snapshot__template_injection-13.snap +127 -0
- zizmor-1.10.0/crates/zizmor/tests/integration/snapshots/integration__snapshot__template_injection-14.snap +56 -0
- zizmor-1.10.0/crates/zizmor/tests/integration/snapshots/integration__snapshot__template_injection-2.snap +26 -0
- zizmor-1.10.0/crates/zizmor/tests/integration/snapshots/integration__snapshot__template_injection-4.snap +16 -0
- zizmor-1.10.0/crates/zizmor/tests/integration/snapshots/integration__snapshot__template_injection-5.snap +38 -0
- zizmor-1.10.0/crates/zizmor/tests/integration/snapshots/integration__snapshot__template_injection-6.snap +15 -0
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__template_injection-7.snap +2 -1
- zizmor-1.10.0/crates/zizmor/tests/integration/snapshots/integration__snapshot__template_injection-8.snap +61 -0
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__template_injection.snap +5 -6
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__unpinned-uses-composite-config-2.snap +7 -7
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__unpinned-uses-composite-config.snap +7 -7
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__unpinned-uses-default-config.snap +5 -5
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__unpinned-uses-empty-config.snap +13 -13
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__unpinned-uses-hash-pin-everything-config.snap +13 -13
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__unpinned-uses-ref-pin-everything-config.snap +3 -3
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__unpinned_images.snap +13 -13
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__unpinned_uses-10.snap +1 -2
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__unpinned_uses-11.snap +1 -2
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__unpinned_uses-12.snap +1 -2
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__unpinned_uses-2.snap +9 -9
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__unpinned_uses-5.snap +6 -6
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__unpinned_uses-6.snap +1 -2
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__unpinned_uses-7.snap +1 -2
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__unpinned_uses-8.snap +1 -2
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__unpinned_uses-9.snap +1 -2
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__unpinned_uses.snap +9 -9
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__unredacted_secrets.snap +5 -5
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__unsound_contains.snap +11 -12
- zizmor-1.10.0/crates/zizmor/tests/integration/snapshots/integration__snapshot__use_trusted_publishing-2.snap +16 -0
- zizmor-1.10.0/crates/zizmor/tests/integration/snapshots/integration__snapshot__use_trusted_publishing.snap +16 -0
- zizmor-1.10.0/crates/zizmor/tests/integration/test-data/anonymous-definition.yml +20 -0
- zizmor-1.10.0/crates/zizmor/tests/integration/test-data/artipacked/demo-action/action.yml +15 -0
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/artipacked/issue-447-repro.yml +1 -0
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/artipacked.yml +4 -0
- zizmor-1.10.0/crates/zizmor/tests/integration/test-data/bot-conditions.yml +60 -0
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/cache-poisoning/caching-disabled-by-default.yml +3 -0
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/cache-poisoning/caching-enabled-by-default.yml +3 -0
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/cache-poisoning/caching-not-configurable.yml +3 -0
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/cache-poisoning/caching-opt-in-boolean-toggle.yml +3 -0
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/cache-poisoning/caching-opt-in-boolish-toggle.yml +3 -0
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/cache-poisoning/caching-opt-in-expression.yml +3 -0
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/cache-poisoning/caching-opt-in-multi-value-toggle.yml +3 -0
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/cache-poisoning/caching-opt-out.yml +3 -0
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/cache-poisoning/issue-343-repro.yml +1 -0
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/cache-poisoning/issue-378-repro.yml +1 -0
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/cache-poisoning/issue-642-repro.yml +2 -0
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/cache-poisoning/no-cache-aware-steps.yml +3 -0
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/cache-poisoning/publisher-step.yml +3 -0
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/cache-poisoning/workflow-release-branch-trigger.yml +3 -0
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/cache-poisoning/workflow-tag-trigger.yml +3 -0
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/cache-poisoning.yml +3 -0
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/e2e-menagerie/.github/workflows/another-dummy.yml +1 -0
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/e2e-menagerie/.github/workflows/dummy.yml +1 -0
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/e2e-menagerie/.github/workflows/ignored.yaml +1 -0
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/excessive-permissions/issue-336-repro.yml +3 -0
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/excessive-permissions/issue-472-repro.yml +2 -0
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/excessive-permissions/jobs-broaden-permissions.yml +4 -0
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/excessive-permissions/reusable-workflow-call.yml +1 -0
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/excessive-permissions/reusable-workflow-other-triggers.yml +2 -0
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/excessive-permissions/workflow-default-perms-all-jobs-explicit.yml +4 -0
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/excessive-permissions/workflow-default-perms.yml +3 -0
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/excessive-permissions/workflow-empty-perms.yml +4 -0
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/excessive-permissions/workflow-read-all.yml +4 -0
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/excessive-permissions/workflow-write-all.yml +4 -0
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/excessive-permissions/workflow-write-explicit.yml +4 -0
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/excessive-permissions.yml +3 -0
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/forbidden-uses/forbidden-uses-menagerie.yml +1 -0
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/github-env/github-path.yml +3 -0
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/github-env/issue-397-repro.yml +3 -0
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/github_env.yml +3 -0
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/hardcoded-credentials.yml +3 -0
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/inlined-ignores.yml +2 -0
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/insecure-commands/issue-839-repro.yml +5 -0
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/insecure-commands.yml +2 -0
- zizmor-1.10.0/crates/zizmor/tests/integration/test-data/obfuscation/computed-indices.yml +16 -0
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/obfuscation.yml +2 -0
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/overprovisioned-secrets.yml +3 -0
- zizmor-1.10.0/crates/zizmor/tests/integration/test-data/pr-960-backstop/action.yml +10 -0
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/ref-confusion/issue-518-repro.yml +1 -0
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/secrets-inherit.yml +6 -0
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/self-hosted/issue-283-repro.yml +1 -0
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/self-hosted/self-hosted-matrix-dimension.yml +3 -0
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/self-hosted/self-hosted-matrix-exclusion.yml +3 -0
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/self-hosted/self-hosted-matrix-inclusion.yml +3 -0
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/self-hosted/self-hosted-runner-group.yml +3 -0
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/self-hosted/self-hosted-runner-label.yml +3 -0
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/self-hosted.yml +3 -0
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/stale-action-refs.yml +2 -0
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/template-injection/codeql-sinks.yml +1 -0
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/template-injection/false-positive-menagerie.yml +1 -0
- zizmor-1.10.0/crates/zizmor/tests/integration/test-data/template-injection/input-caps.yml +18 -0
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/template-injection/issue-418-repro.yml +1 -0
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/template-injection/issue-749-repro.yml +1 -0
- zizmor-1.10.0/crates/zizmor/tests/integration/test-data/template-injection/issue-883-repro/action.yml +123 -0
- zizmor-1.10.0/crates/zizmor/tests/integration/test-data/template-injection/multiline-expression.yml +27 -0
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/template-injection/patterns.yml +1 -0
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/template-injection/pwsh-script.yml +1 -0
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/template-injection/template-injection-dynamic-matrix.yml +1 -0
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/template-injection/template-injection-static-matrix.yml +1 -0
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/template-injection.yml +1 -0
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/unpinned-images.yml +10 -0
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/unpinned-uses/issue-433-repro.yml +1 -0
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/unpinned-uses/issue-659-repro.yml +1 -0
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/unpinned-uses/menagerie-of-uses.yml +1 -0
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/unpinned-uses.yml +1 -0
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/unredacted-secrets.yml +3 -0
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/unsound-contains.yml +3 -0
- zizmor-1.10.0/crates/zizmor/tests/integration/test-data/use-trusted-publishing/demo-action/action.yml +11 -0
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/use-trusted-publishing.yml +3 -0
- zizmor-1.9.0/crates/github-actions-expressions/src/lib.rs +0 -838
- zizmor-1.9.0/crates/zizmor/src/audit/artipacked.rs +0 -148
- zizmor-1.9.0/crates/zizmor/src/audit/template_injection.rs +0 -342
- zizmor-1.9.0/crates/zizmor/src/finding/mod.rs +0 -613
- zizmor-1.9.0/crates/zizmor/tests/integration/snapshots/integration__snapshot__artipacked-4.snap +0 -18
- zizmor-1.9.0/crates/zizmor/tests/integration/snapshots/integration__snapshot__bot_conditions.snap +0 -45
- zizmor-1.9.0/crates/zizmor/tests/integration/snapshots/integration__snapshot__excessive_permissions-11.snap +0 -18
- zizmor-1.9.0/crates/zizmor/tests/integration/snapshots/integration__snapshot__secrets_inherit.snap +0 -16
- zizmor-1.9.0/crates/zizmor/tests/integration/snapshots/integration__snapshot__template_injection-11.snap +0 -18
- zizmor-1.9.0/crates/zizmor/tests/integration/snapshots/integration__snapshot__template_injection-12.snap +0 -21
- zizmor-1.9.0/crates/zizmor/tests/integration/snapshots/integration__snapshot__template_injection-2.snap +0 -27
- zizmor-1.9.0/crates/zizmor/tests/integration/snapshots/integration__snapshot__template_injection-4.snap +0 -18
- zizmor-1.9.0/crates/zizmor/tests/integration/snapshots/integration__snapshot__template_injection-5.snap +0 -38
- zizmor-1.9.0/crates/zizmor/tests/integration/snapshots/integration__snapshot__template_injection-6.snap +0 -17
- zizmor-1.9.0/crates/zizmor/tests/integration/snapshots/integration__snapshot__template_injection-8.snap +0 -61
- zizmor-1.9.0/crates/zizmor/tests/integration/test-data/bot-conditions.yml +0 -24
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/github-actions-expressions/README.md +0 -0
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/github-actions-models/LICENSE +0 -0
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/github-actions-models/README.md +0 -0
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/github-actions-models/src/dependabot/mod.rs +0 -0
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/github-actions-models/src/dependabot/v2.rs +0 -0
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/github-actions-models/src/lib.rs +0 -0
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/github-actions-models/src/workflow/mod.rs +0 -0
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/github-actions-models/tests/sample-actions/gh-action-pip-audit.yml +0 -0
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/github-actions-models/tests/sample-actions/gh-action-pypi-publish.yml +0 -0
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/github-actions-models/tests/sample-actions/gh-action-sigstore-python.yml +0 -0
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/github-actions-models/tests/sample-actions/no-input-output-descriptions.yml +0 -0
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/github-actions-models/tests/sample-actions/setup-python.yml +0 -0
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/github-actions-models/tests/sample-dependabot/v2/pip-audit.yml +0 -0
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/github-actions-models/tests/sample-dependabot/v2/sigstore-python.yml +0 -0
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/github-actions-models/tests/sample-workflows/adafruit-circuitpython-run-tests.yml +0 -0
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/github-actions-models/tests/sample-workflows/false-condition.yml +0 -0
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/github-actions-models/tests/sample-workflows/gh-action-sigstore-python-selftest.yml +0 -0
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/github-actions-models/tests/sample-workflows/git-annex-built-windows.yaml +0 -0
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/github-actions-models/tests/sample-workflows/guacsec-guac-ci.yml +0 -0
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/github-actions-models/tests/sample-workflows/homebrew-core-automerge-triggers.yml +0 -0
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/github-actions-models/tests/sample-workflows/intel-llvm-sycl-linux-run-tests.yml +0 -0
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/github-actions-models/tests/sample-workflows/issue-35.yml +0 -0
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/github-actions-models/tests/sample-workflows/jazzband-tablib-docs-lint.yml +0 -0
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/github-actions-models/tests/sample-workflows/letsencrypt-boulder-boulder-ci.yml +0 -0
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/github-actions-models/tests/sample-workflows/mhils-workflows-python-deploy.yml +0 -0
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/github-actions-models/tests/sample-workflows/openbao-openbao-test-go.yml +0 -0
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/github-actions-models/tests/sample-workflows/pip-api-test.yml +0 -0
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/github-actions-models/tests/sample-workflows/pip-audit-ci.yml +0 -0
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/github-actions-models/tests/sample-workflows/pip-audit-scorecards.yml +0 -0
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/github-actions-models/tests/sample-workflows/pwn-requests.yml +0 -0
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/github-actions-models/tests/sample-workflows/pyca-cryptography-ci.yml +0 -0
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/github-actions-models/tests/sample-workflows/pypi-attestations-release.yml +0 -0
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/github-actions-models/tests/sample-workflows/reusable-workflow-unpinned.yml +0 -0
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/github-actions-models/tests/sample-workflows/rnpgp-rnp-centos-and-fedora.yml +0 -0
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/github-actions-models/tests/sample-workflows/runs-on-expr.yml +0 -0
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/github-actions-models/tests/sample-workflows/runs-on-group-only.yml +0 -0
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/github-actions-models/tests/sample-workflows/scalar-trigger-type.yml +0 -0
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/github-actions-models/tests/sample-workflows/vil02-puzzle_generator-check_examples.yml +0 -0
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/github-actions-models/tests/sample-workflows/zizmor-issue-646.yml +0 -0
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/github-actions-models/tests/sample-workflows/zizmor-issue-650.yml +0 -0
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/github-actions-models/tests/test_action.rs +0 -0
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/github-actions-models/tests/test_dependabot_v2.rs +0 -0
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/yamlpath/LICENSE +0 -0
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/yamlpath/README.md +0 -0
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/yamlpath/tests/testcases/basic.yml +0 -0
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/yamlpath/tests/testcases/comments.yml +0 -0
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/yamlpath/tests/testcases/directives.yml +0 -0
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/yamlpath/tests/testcases/interceding-comment.yml +0 -0
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/yamlpath/tests/testcases/quoted-key.yml +0 -0
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/build.rs +0 -0
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/data/codeql-injection-sinks.json +27 -27
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/src/config.rs +0 -0
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/src/github_api.rs +0 -0
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/src/models/uses.rs +0 -0
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/src/state.rs +0 -0
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/common.rs +0 -0
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/main.rs +0 -0
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__e2e__invalid_config_file.snap +0 -0
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__e2e__issue_612_repro.snap +0 -0
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__cache_poisoning-14.snap +0 -0
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__cache_poisoning-6.snap +0 -0
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__cache_poisoning-7.snap +0 -0
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__cache_poisoning.snap +0 -0
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__cant_retrieve.snap +0 -0
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__excessive_permissions-6.snap +0 -0
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__excessive_permissions-9.snap +0 -0
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__excessive_permissions.snap +0 -0
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__forbidden_uses.snap +0 -0
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__github_env.snap +0 -0
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__insecure_commands-3.snap +0 -0
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__self_hosted-2.snap +0 -0
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__self_hosted-7.snap +0 -0
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__self_hosted-8.snap +0 -0
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__template_injection-10.snap +0 -0
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__template_injection-3.snap +0 -0
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__template_injection-9.snap +0 -0
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__unpinned_uses-3.snap +0 -0
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/snapshots/integration__snapshot__unpinned_uses-4.snap +0 -0
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/e2e-menagerie/.github/dummy-action-2/action.yml +0 -0
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/e2e-menagerie/.gitignore +0 -0
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/e2e-menagerie/README.md +0 -0
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/e2e-menagerie/dummy-action-1/action.yaml +0 -0
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/forbidden-uses/configs/allow-all.yml +0 -0
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/forbidden-uses/configs/allow-some-refs.yml +0 -0
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/forbidden-uses/configs/allow-some.yml +0 -0
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/forbidden-uses/configs/deny-all.yml +0 -0
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/forbidden-uses/configs/deny-some-refs.yml +0 -0
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/forbidden-uses/configs/deny-some.yml +0 -0
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/github-env/action.yml +0 -0
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/insecure-commands/action.yml +0 -0
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/invalid/bad-yaml-1.yml +0 -0
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/invalid/bad-yaml-2.yml +0 -0
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/invalid/blank.yml +0 -0
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/invalid/comment-only.yml +0 -0
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/invalid/empty-action/action.yml +0 -0
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/invalid/empty.yml +0 -0
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/invalid/invalid-action-1/action.yml +0 -0
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/invalid/invalid-action-2/action.yml +0 -0
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/invalid/invalid-workflow-2.yml +0 -0
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/invalid/invalid-workflow.yml +0 -0
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/issue-612-repro/action.yml +0 -0
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/ref-confusion.yml +0 -0
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/several-vulnerabilities.yml +0 -0
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/template-injection/dataflow.yml +0 -0
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/template-injection/issue-22-repro.yml +0 -0
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/template-injection/issue-339-repro.yml +0 -0
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/template-injection/pr-317-repro.yml +0 -0
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/template-injection/pr-425-backstop/action.yml +0 -0
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/template-injection/static-env.yml +0 -0
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/unpinned-uses/action.yml +0 -0
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/unpinned-uses/configs/composite-2.yml +0 -0
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/unpinned-uses/configs/composite.yml +0 -0
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/unpinned-uses/configs/empty.yml +0 -0
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/unpinned-uses/configs/hash-pin-everything.yml +0 -0
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/unpinned-uses/configs/invalid-policy-syntax-1.yml +0 -0
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/unpinned-uses/configs/invalid-policy-syntax-2.yml +0 -0
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/unpinned-uses/configs/invalid-policy-syntax-3.yml +0 -0
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/unpinned-uses/configs/invalid-policy-syntax-4.yml +0 -0
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/unpinned-uses/configs/invalid-policy-syntax-5.yml +0 -0
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/unpinned-uses/configs/invalid-policy-syntax-6.yml +0 -0
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/unpinned-uses/configs/invalid-wrong-policy-object.yml +0 -0
- {zizmor-1.9.0 → zizmor-1.10.0}/crates/zizmor/tests/integration/test-data/unpinned-uses/configs/ref-pin-everything.yml +0 -0
- {zizmor-1.9.0 → zizmor-1.10.0}/pyproject.toml +0 -0
|
@@ -62,9 +62,9 @@ dependencies = [
|
|
|
62
62
|
|
|
63
63
|
[[package]]
|
|
64
64
|
name = "anstream"
|
|
65
|
-
version = "0.6.
|
|
65
|
+
version = "0.6.19"
|
|
66
66
|
source = "registry+https://github.com/rust-lang/crates.io-index"
|
|
67
|
-
checksum = "
|
|
67
|
+
checksum = "301af1932e46185686725e0fad2f8f2aa7da69dd70bf6ecc44d6b703844a3933"
|
|
68
68
|
dependencies = [
|
|
69
69
|
"anstyle",
|
|
70
70
|
"anstyle-parse",
|
|
@@ -167,7 +167,7 @@ dependencies = [
|
|
|
167
167
|
"miniz_oxide",
|
|
168
168
|
"object",
|
|
169
169
|
"rustc-demangle",
|
|
170
|
-
"windows-targets
|
|
170
|
+
"windows-targets",
|
|
171
171
|
]
|
|
172
172
|
|
|
173
173
|
[[package]]
|
|
@@ -285,9 +285,9 @@ dependencies = [
|
|
|
285
285
|
|
|
286
286
|
[[package]]
|
|
287
287
|
name = "camino"
|
|
288
|
-
version = "1.1.
|
|
288
|
+
version = "1.1.10"
|
|
289
289
|
source = "registry+https://github.com/rust-lang/crates.io-index"
|
|
290
|
-
checksum = "
|
|
290
|
+
checksum = "0da45bc31171d8d6960122e222a67740df867c1dd53b4d51caa297084c185cab"
|
|
291
291
|
dependencies = [
|
|
292
292
|
"serde",
|
|
293
293
|
]
|
|
@@ -315,9 +315,9 @@ checksum = "613afe47fcd5fac7ccf1db93babcb082c5994d996f20b8b159f2ad1658eb5724"
|
|
|
315
315
|
|
|
316
316
|
[[package]]
|
|
317
317
|
name = "clap"
|
|
318
|
-
version = "4.5.
|
|
318
|
+
version = "4.5.40"
|
|
319
319
|
source = "registry+https://github.com/rust-lang/crates.io-index"
|
|
320
|
-
checksum = "
|
|
320
|
+
checksum = "40b6887a1d8685cebccf115538db5c0efe625ccac9696ad45c409d96566e910f"
|
|
321
321
|
dependencies = [
|
|
322
322
|
"clap_builder",
|
|
323
323
|
"clap_derive",
|
|
@@ -335,9 +335,9 @@ dependencies = [
|
|
|
335
335
|
|
|
336
336
|
[[package]]
|
|
337
337
|
name = "clap_builder"
|
|
338
|
-
version = "4.5.
|
|
338
|
+
version = "4.5.40"
|
|
339
339
|
source = "registry+https://github.com/rust-lang/crates.io-index"
|
|
340
|
-
checksum = "
|
|
340
|
+
checksum = "e0c66c08ce9f0c698cbce5c0279d0bb6ac936d8674174fe48f736533b964f59e"
|
|
341
341
|
dependencies = [
|
|
342
342
|
"anstream",
|
|
343
343
|
"anstyle",
|
|
@@ -347,18 +347,18 @@ dependencies = [
|
|
|
347
347
|
|
|
348
348
|
[[package]]
|
|
349
349
|
name = "clap_complete"
|
|
350
|
-
version = "4.5.
|
|
350
|
+
version = "4.5.54"
|
|
351
351
|
source = "registry+https://github.com/rust-lang/crates.io-index"
|
|
352
|
-
checksum = "
|
|
352
|
+
checksum = "aad5b1b4de04fead402672b48897030eec1f3bfe1550776322f59f6d6e6a5677"
|
|
353
353
|
dependencies = [
|
|
354
354
|
"clap",
|
|
355
355
|
]
|
|
356
356
|
|
|
357
357
|
[[package]]
|
|
358
358
|
name = "clap_complete_nushell"
|
|
359
|
-
version = "4.5.
|
|
359
|
+
version = "4.5.7"
|
|
360
360
|
source = "registry+https://github.com/rust-lang/crates.io-index"
|
|
361
|
-
checksum = "
|
|
361
|
+
checksum = "cdb8335b398d197fb3176efe9400c6c053a41733c26794316c73423d212b2f3d"
|
|
362
362
|
dependencies = [
|
|
363
363
|
"clap",
|
|
364
364
|
"clap_complete",
|
|
@@ -366,9 +366,9 @@ dependencies = [
|
|
|
366
366
|
|
|
367
367
|
[[package]]
|
|
368
368
|
name = "clap_derive"
|
|
369
|
-
version = "4.5.
|
|
369
|
+
version = "4.5.40"
|
|
370
370
|
source = "registry+https://github.com/rust-lang/crates.io-index"
|
|
371
|
-
checksum = "
|
|
371
|
+
checksum = "d2c7947ae4cc3d851207c1adb5b5e260ff0cca11446b1d6d1423788e442257ce"
|
|
372
372
|
dependencies = [
|
|
373
373
|
"heck",
|
|
374
374
|
"proc-macro2",
|
|
@@ -602,9 +602,9 @@ dependencies = [
|
|
|
602
602
|
|
|
603
603
|
[[package]]
|
|
604
604
|
name = "flate2"
|
|
605
|
-
version = "1.1.
|
|
605
|
+
version = "1.1.2"
|
|
606
606
|
source = "registry+https://github.com/rust-lang/crates.io-index"
|
|
607
|
-
checksum = "
|
|
607
|
+
checksum = "4a3d7db9596fecd151c5f638c0ee5d5bd487b6e0ea232e5dc96d5250f6f94b1d"
|
|
608
608
|
dependencies = [
|
|
609
609
|
"crc32fast",
|
|
610
610
|
"miniz_oxide",
|
|
@@ -786,7 +786,7 @@ checksum = "07e28edb80900c19c28f1072f2e8aeca7fa06b23cd4169cefe1af5aa3260783f"
|
|
|
786
786
|
|
|
787
787
|
[[package]]
|
|
788
788
|
name = "github-actions-expressions"
|
|
789
|
-
version = "0.0.
|
|
789
|
+
version = "0.0.7"
|
|
790
790
|
dependencies = [
|
|
791
791
|
"anyhow",
|
|
792
792
|
"itertools",
|
|
@@ -797,11 +797,12 @@ dependencies = [
|
|
|
797
797
|
|
|
798
798
|
[[package]]
|
|
799
799
|
name = "github-actions-models"
|
|
800
|
-
version = "0.
|
|
800
|
+
version = "0.31.0"
|
|
801
801
|
dependencies = [
|
|
802
802
|
"indexmap",
|
|
803
803
|
"serde",
|
|
804
804
|
"serde_yaml",
|
|
805
|
+
"tracing",
|
|
805
806
|
]
|
|
806
807
|
|
|
807
808
|
[[package]]
|
|
@@ -995,22 +996,26 @@ dependencies = [
|
|
|
995
996
|
"tokio",
|
|
996
997
|
"tokio-rustls",
|
|
997
998
|
"tower-service",
|
|
998
|
-
"webpki-roots",
|
|
999
|
+
"webpki-roots 0.26.9",
|
|
999
1000
|
]
|
|
1000
1001
|
|
|
1001
1002
|
[[package]]
|
|
1002
1003
|
name = "hyper-util"
|
|
1003
|
-
version = "0.1.
|
|
1004
|
+
version = "0.1.13"
|
|
1004
1005
|
source = "registry+https://github.com/rust-lang/crates.io-index"
|
|
1005
|
-
checksum = "
|
|
1006
|
+
checksum = "b1c293b6b3d21eca78250dc7dbebd6b9210ec5530e038cbfe0661b5c47ab06e8"
|
|
1006
1007
|
dependencies = [
|
|
1008
|
+
"base64 0.22.1",
|
|
1007
1009
|
"bytes",
|
|
1008
1010
|
"futures-channel",
|
|
1011
|
+
"futures-core",
|
|
1009
1012
|
"futures-util",
|
|
1010
1013
|
"http",
|
|
1011
1014
|
"http-body",
|
|
1012
1015
|
"hyper",
|
|
1016
|
+
"ipnet",
|
|
1013
1017
|
"libc",
|
|
1018
|
+
"percent-encoding",
|
|
1014
1019
|
"pin-project-lite",
|
|
1015
1020
|
"socket2",
|
|
1016
1021
|
"tokio",
|
|
@@ -1224,6 +1229,16 @@ version = "2.11.0"
|
|
|
1224
1229
|
source = "registry+https://github.com/rust-lang/crates.io-index"
|
|
1225
1230
|
checksum = "469fb0b9cefa57e3ef31275ee7cacb78f2fdca44e4765491884a2b119d4eb130"
|
|
1226
1231
|
|
|
1232
|
+
[[package]]
|
|
1233
|
+
name = "iri-string"
|
|
1234
|
+
version = "0.7.8"
|
|
1235
|
+
source = "registry+https://github.com/rust-lang/crates.io-index"
|
|
1236
|
+
checksum = "dbc5ebe9c3a1a7a5127f920a418f7585e9e758e911d0466ed004f393b0e380b2"
|
|
1237
|
+
dependencies = [
|
|
1238
|
+
"memchr",
|
|
1239
|
+
"serde",
|
|
1240
|
+
]
|
|
1241
|
+
|
|
1227
1242
|
[[package]]
|
|
1228
1243
|
name = "is_terminal_polyfill"
|
|
1229
1244
|
version = "1.70.1"
|
|
@@ -1390,12 +1405,6 @@ dependencies = [
|
|
|
1390
1405
|
"syn 2.0.101",
|
|
1391
1406
|
]
|
|
1392
1407
|
|
|
1393
|
-
[[package]]
|
|
1394
|
-
name = "mime"
|
|
1395
|
-
version = "0.3.17"
|
|
1396
|
-
source = "registry+https://github.com/rust-lang/crates.io-index"
|
|
1397
|
-
checksum = "6877bb514081ee2a7ff5ef9de3281f14a4dd4bceac4c09388074a6b5df8a139a"
|
|
1398
|
-
|
|
1399
1408
|
[[package]]
|
|
1400
1409
|
name = "minimal-lexical"
|
|
1401
1410
|
version = "0.2.1"
|
|
@@ -1603,7 +1612,7 @@ dependencies = [
|
|
|
1603
1612
|
"libc",
|
|
1604
1613
|
"redox_syscall",
|
|
1605
1614
|
"smallvec",
|
|
1606
|
-
"windows-targets
|
|
1615
|
+
"windows-targets",
|
|
1607
1616
|
]
|
|
1608
1617
|
|
|
1609
1618
|
[[package]]
|
|
@@ -1614,9 +1623,9 @@ checksum = "e3148f5046208a5d56bcfc03053e3ca6334e51da8dfb19b6cdc8b306fae3283e"
|
|
|
1614
1623
|
|
|
1615
1624
|
[[package]]
|
|
1616
1625
|
name = "pest"
|
|
1617
|
-
version = "2.8.
|
|
1626
|
+
version = "2.8.1"
|
|
1618
1627
|
source = "registry+https://github.com/rust-lang/crates.io-index"
|
|
1619
|
-
checksum = "
|
|
1628
|
+
checksum = "1db05f56d34358a8b1066f67cbb203ee3e7ed2ba674a6263a1d5ec6db2204323"
|
|
1620
1629
|
dependencies = [
|
|
1621
1630
|
"memchr",
|
|
1622
1631
|
"thiserror 2.0.12",
|
|
@@ -1625,9 +1634,9 @@ dependencies = [
|
|
|
1625
1634
|
|
|
1626
1635
|
[[package]]
|
|
1627
1636
|
name = "pest_derive"
|
|
1628
|
-
version = "2.8.
|
|
1637
|
+
version = "2.8.1"
|
|
1629
1638
|
source = "registry+https://github.com/rust-lang/crates.io-index"
|
|
1630
|
-
checksum = "
|
|
1639
|
+
checksum = "bb056d9e8ea77922845ec74a1c4e8fb17e7c218cc4fc11a15c5d25e189aa40bc"
|
|
1631
1640
|
dependencies = [
|
|
1632
1641
|
"pest",
|
|
1633
1642
|
"pest_generator",
|
|
@@ -1635,9 +1644,9 @@ dependencies = [
|
|
|
1635
1644
|
|
|
1636
1645
|
[[package]]
|
|
1637
1646
|
name = "pest_generator"
|
|
1638
|
-
version = "2.8.
|
|
1647
|
+
version = "2.8.1"
|
|
1639
1648
|
source = "registry+https://github.com/rust-lang/crates.io-index"
|
|
1640
|
-
checksum = "
|
|
1649
|
+
checksum = "87e404e638f781eb3202dc82db6760c8ae8a1eeef7fb3fa8264b2ef280504966"
|
|
1641
1650
|
dependencies = [
|
|
1642
1651
|
"pest",
|
|
1643
1652
|
"pest_meta",
|
|
@@ -1648,11 +1657,10 @@ dependencies = [
|
|
|
1648
1657
|
|
|
1649
1658
|
[[package]]
|
|
1650
1659
|
name = "pest_meta"
|
|
1651
|
-
version = "2.8.
|
|
1660
|
+
version = "2.8.1"
|
|
1652
1661
|
source = "registry+https://github.com/rust-lang/crates.io-index"
|
|
1653
|
-
checksum = "
|
|
1662
|
+
checksum = "edd1101f170f5903fde0914f899bb503d9ff5271d7ba76bbb70bea63690cc0d5"
|
|
1654
1663
|
dependencies = [
|
|
1655
|
-
"once_cell",
|
|
1656
1664
|
"pest",
|
|
1657
1665
|
"sha2",
|
|
1658
1666
|
]
|
|
@@ -1945,9 +1953,9 @@ checksum = "2b15c43186be67a4fd63bee50d0303afffcef381492ebe2c5d87f324e1b8815c"
|
|
|
1945
1953
|
|
|
1946
1954
|
[[package]]
|
|
1947
1955
|
name = "reqwest"
|
|
1948
|
-
version = "0.12.
|
|
1956
|
+
version = "0.12.20"
|
|
1949
1957
|
source = "registry+https://github.com/rust-lang/crates.io-index"
|
|
1950
|
-
checksum = "
|
|
1958
|
+
checksum = "eabf4c97d9130e2bf606614eb937e86edac8292eaa6f422f995d7e8de1eb1813"
|
|
1951
1959
|
dependencies = [
|
|
1952
1960
|
"base64 0.22.1",
|
|
1953
1961
|
"bytes",
|
|
@@ -1960,16 +1968,12 @@ dependencies = [
|
|
|
1960
1968
|
"hyper",
|
|
1961
1969
|
"hyper-rustls",
|
|
1962
1970
|
"hyper-util",
|
|
1963
|
-
"ipnet",
|
|
1964
1971
|
"js-sys",
|
|
1965
1972
|
"log",
|
|
1966
|
-
"mime",
|
|
1967
|
-
"once_cell",
|
|
1968
1973
|
"percent-encoding",
|
|
1969
1974
|
"pin-project-lite",
|
|
1970
1975
|
"quinn",
|
|
1971
1976
|
"rustls",
|
|
1972
|
-
"rustls-pemfile",
|
|
1973
1977
|
"rustls-pki-types",
|
|
1974
1978
|
"serde",
|
|
1975
1979
|
"serde_json",
|
|
@@ -1978,13 +1982,13 @@ dependencies = [
|
|
|
1978
1982
|
"tokio",
|
|
1979
1983
|
"tokio-rustls",
|
|
1980
1984
|
"tower",
|
|
1985
|
+
"tower-http",
|
|
1981
1986
|
"tower-service",
|
|
1982
1987
|
"url",
|
|
1983
1988
|
"wasm-bindgen",
|
|
1984
1989
|
"wasm-bindgen-futures",
|
|
1985
1990
|
"web-sys",
|
|
1986
|
-
"webpki-roots",
|
|
1987
|
-
"windows-registry",
|
|
1991
|
+
"webpki-roots 1.0.0",
|
|
1988
1992
|
]
|
|
1989
1993
|
|
|
1990
1994
|
[[package]]
|
|
@@ -2055,15 +2059,6 @@ dependencies = [
|
|
|
2055
2059
|
"zeroize",
|
|
2056
2060
|
]
|
|
2057
2061
|
|
|
2058
|
-
[[package]]
|
|
2059
|
-
name = "rustls-pemfile"
|
|
2060
|
-
version = "2.2.0"
|
|
2061
|
-
source = "registry+https://github.com/rust-lang/crates.io-index"
|
|
2062
|
-
checksum = "dce314e5fee3f39953d46bb63bb8a46d40c2f8fb7cc5a3b6cab2bde9721d6e50"
|
|
2063
|
-
dependencies = [
|
|
2064
|
-
"rustls-pki-types",
|
|
2065
|
-
]
|
|
2066
|
-
|
|
2067
2062
|
[[package]]
|
|
2068
2063
|
name = "rustls-pki-types"
|
|
2069
2064
|
version = "1.11.0"
|
|
@@ -2707,6 +2702,24 @@ dependencies = [
|
|
|
2707
2702
|
"tower-service",
|
|
2708
2703
|
]
|
|
2709
2704
|
|
|
2705
|
+
[[package]]
|
|
2706
|
+
name = "tower-http"
|
|
2707
|
+
version = "0.6.5"
|
|
2708
|
+
source = "registry+https://github.com/rust-lang/crates.io-index"
|
|
2709
|
+
checksum = "5cc2d9e086a412a451384326f521c8123a99a466b329941a9403696bff9b0da2"
|
|
2710
|
+
dependencies = [
|
|
2711
|
+
"bitflags",
|
|
2712
|
+
"bytes",
|
|
2713
|
+
"futures-util",
|
|
2714
|
+
"http",
|
|
2715
|
+
"http-body",
|
|
2716
|
+
"iri-string",
|
|
2717
|
+
"pin-project-lite",
|
|
2718
|
+
"tower",
|
|
2719
|
+
"tower-layer",
|
|
2720
|
+
"tower-service",
|
|
2721
|
+
]
|
|
2722
|
+
|
|
2710
2723
|
[[package]]
|
|
2711
2724
|
name = "tower-layer"
|
|
2712
2725
|
version = "0.3.3"
|
|
@@ -2794,9 +2807,9 @@ dependencies = [
|
|
|
2794
2807
|
|
|
2795
2808
|
[[package]]
|
|
2796
2809
|
name = "tree-sitter"
|
|
2797
|
-
version = "0.25.
|
|
2810
|
+
version = "0.25.6"
|
|
2798
2811
|
source = "registry+https://github.com/rust-lang/crates.io-index"
|
|
2799
|
-
checksum = "
|
|
2812
|
+
checksum = "a7cf18d43cbf0bfca51f657132cc616a5097edc4424d538bae6fa60142eaf9f0"
|
|
2800
2813
|
dependencies = [
|
|
2801
2814
|
"cc",
|
|
2802
2815
|
"regex",
|
|
@@ -2824,9 +2837,9 @@ checksum = "c4013970217383f67b18aef68f6fb2e8d409bc5755227092d32efb0422ba24b8"
|
|
|
2824
2837
|
|
|
2825
2838
|
[[package]]
|
|
2826
2839
|
name = "tree-sitter-powershell"
|
|
2827
|
-
version = "0.25.
|
|
2840
|
+
version = "0.25.6"
|
|
2828
2841
|
source = "registry+https://github.com/rust-lang/crates.io-index"
|
|
2829
|
-
checksum = "
|
|
2842
|
+
checksum = "e265a36be4ab388c842629bef61fb719c83f9be3241db92288d064ed425758ba"
|
|
2830
2843
|
dependencies = [
|
|
2831
2844
|
"cc",
|
|
2832
2845
|
"tree-sitter-language",
|
|
@@ -3164,6 +3177,15 @@ dependencies = [
|
|
|
3164
3177
|
"rustls-pki-types",
|
|
3165
3178
|
]
|
|
3166
3179
|
|
|
3180
|
+
[[package]]
|
|
3181
|
+
name = "webpki-roots"
|
|
3182
|
+
version = "1.0.0"
|
|
3183
|
+
source = "registry+https://github.com/rust-lang/crates.io-index"
|
|
3184
|
+
checksum = "2853738d1cc4f2da3a225c18ec6c3721abb31961096e9dbf5ab35fa88b19cfdb"
|
|
3185
|
+
dependencies = [
|
|
3186
|
+
"rustls-pki-types",
|
|
3187
|
+
]
|
|
3188
|
+
|
|
3167
3189
|
[[package]]
|
|
3168
3190
|
name = "winapi"
|
|
3169
3191
|
version = "0.3.9"
|
|
@@ -3227,7 +3249,7 @@ dependencies = [
|
|
|
3227
3249
|
"windows-interface",
|
|
3228
3250
|
"windows-link",
|
|
3229
3251
|
"windows-result",
|
|
3230
|
-
"windows-strings
|
|
3252
|
+
"windows-strings",
|
|
3231
3253
|
]
|
|
3232
3254
|
|
|
3233
3255
|
[[package]]
|
|
@@ -3278,17 +3300,6 @@ dependencies = [
|
|
|
3278
3300
|
"windows-link",
|
|
3279
3301
|
]
|
|
3280
3302
|
|
|
3281
|
-
[[package]]
|
|
3282
|
-
name = "windows-registry"
|
|
3283
|
-
version = "0.4.0"
|
|
3284
|
-
source = "registry+https://github.com/rust-lang/crates.io-index"
|
|
3285
|
-
checksum = "4286ad90ddb45071efd1a66dfa43eb02dd0dfbae1545ad6cc3c51cf34d7e8ba3"
|
|
3286
|
-
dependencies = [
|
|
3287
|
-
"windows-result",
|
|
3288
|
-
"windows-strings 0.3.1",
|
|
3289
|
-
"windows-targets 0.53.0",
|
|
3290
|
-
]
|
|
3291
|
-
|
|
3292
3303
|
[[package]]
|
|
3293
3304
|
name = "windows-result"
|
|
3294
3305
|
version = "0.3.2"
|
|
@@ -3298,15 +3309,6 @@ dependencies = [
|
|
|
3298
3309
|
"windows-link",
|
|
3299
3310
|
]
|
|
3300
3311
|
|
|
3301
|
-
[[package]]
|
|
3302
|
-
name = "windows-strings"
|
|
3303
|
-
version = "0.3.1"
|
|
3304
|
-
source = "registry+https://github.com/rust-lang/crates.io-index"
|
|
3305
|
-
checksum = "87fa48cc5d406560701792be122a10132491cff9d0aeb23583cc2dcafc847319"
|
|
3306
|
-
dependencies = [
|
|
3307
|
-
"windows-link",
|
|
3308
|
-
]
|
|
3309
|
-
|
|
3310
3312
|
[[package]]
|
|
3311
3313
|
name = "windows-strings"
|
|
3312
3314
|
version = "0.4.0"
|
|
@@ -3322,7 +3324,7 @@ version = "0.52.0"
|
|
|
3322
3324
|
source = "registry+https://github.com/rust-lang/crates.io-index"
|
|
3323
3325
|
checksum = "282be5f36a8ce781fad8c8ae18fa3f9beff57ec1b52cb3de0789201425d9a33d"
|
|
3324
3326
|
dependencies = [
|
|
3325
|
-
"windows-targets
|
|
3327
|
+
"windows-targets",
|
|
3326
3328
|
]
|
|
3327
3329
|
|
|
3328
3330
|
[[package]]
|
|
@@ -3331,7 +3333,7 @@ version = "0.59.0"
|
|
|
3331
3333
|
source = "registry+https://github.com/rust-lang/crates.io-index"
|
|
3332
3334
|
checksum = "1e38bc4d79ed67fd075bcc251a1c39b32a1776bbe92e5bef1f0bf1f8c531853b"
|
|
3333
3335
|
dependencies = [
|
|
3334
|
-
"windows-targets
|
|
3336
|
+
"windows-targets",
|
|
3335
3337
|
]
|
|
3336
3338
|
|
|
3337
3339
|
[[package]]
|
|
@@ -3340,30 +3342,14 @@ version = "0.52.6"
|
|
|
3340
3342
|
source = "registry+https://github.com/rust-lang/crates.io-index"
|
|
3341
3343
|
checksum = "9b724f72796e036ab90c1021d4780d4d3d648aca59e491e6b98e725b84e99973"
|
|
3342
3344
|
dependencies = [
|
|
3343
|
-
"windows_aarch64_gnullvm
|
|
3344
|
-
"windows_aarch64_msvc
|
|
3345
|
-
"windows_i686_gnu
|
|
3346
|
-
"windows_i686_gnullvm
|
|
3347
|
-
"windows_i686_msvc
|
|
3348
|
-
"windows_x86_64_gnu
|
|
3349
|
-
"windows_x86_64_gnullvm
|
|
3350
|
-
"windows_x86_64_msvc
|
|
3351
|
-
]
|
|
3352
|
-
|
|
3353
|
-
[[package]]
|
|
3354
|
-
name = "windows-targets"
|
|
3355
|
-
version = "0.53.0"
|
|
3356
|
-
source = "registry+https://github.com/rust-lang/crates.io-index"
|
|
3357
|
-
checksum = "b1e4c7e8ceaaf9cb7d7507c974735728ab453b67ef8f18febdd7c11fe59dca8b"
|
|
3358
|
-
dependencies = [
|
|
3359
|
-
"windows_aarch64_gnullvm 0.53.0",
|
|
3360
|
-
"windows_aarch64_msvc 0.53.0",
|
|
3361
|
-
"windows_i686_gnu 0.53.0",
|
|
3362
|
-
"windows_i686_gnullvm 0.53.0",
|
|
3363
|
-
"windows_i686_msvc 0.53.0",
|
|
3364
|
-
"windows_x86_64_gnu 0.53.0",
|
|
3365
|
-
"windows_x86_64_gnullvm 0.53.0",
|
|
3366
|
-
"windows_x86_64_msvc 0.53.0",
|
|
3345
|
+
"windows_aarch64_gnullvm",
|
|
3346
|
+
"windows_aarch64_msvc",
|
|
3347
|
+
"windows_i686_gnu",
|
|
3348
|
+
"windows_i686_gnullvm",
|
|
3349
|
+
"windows_i686_msvc",
|
|
3350
|
+
"windows_x86_64_gnu",
|
|
3351
|
+
"windows_x86_64_gnullvm",
|
|
3352
|
+
"windows_x86_64_msvc",
|
|
3367
3353
|
]
|
|
3368
3354
|
|
|
3369
3355
|
[[package]]
|
|
@@ -3372,96 +3358,48 @@ version = "0.52.6"
|
|
|
3372
3358
|
source = "registry+https://github.com/rust-lang/crates.io-index"
|
|
3373
3359
|
checksum = "32a4622180e7a0ec044bb555404c800bc9fd9ec262ec147edd5989ccd0c02cd3"
|
|
3374
3360
|
|
|
3375
|
-
[[package]]
|
|
3376
|
-
name = "windows_aarch64_gnullvm"
|
|
3377
|
-
version = "0.53.0"
|
|
3378
|
-
source = "registry+https://github.com/rust-lang/crates.io-index"
|
|
3379
|
-
checksum = "86b8d5f90ddd19cb4a147a5fa63ca848db3df085e25fee3cc10b39b6eebae764"
|
|
3380
|
-
|
|
3381
3361
|
[[package]]
|
|
3382
3362
|
name = "windows_aarch64_msvc"
|
|
3383
3363
|
version = "0.52.6"
|
|
3384
3364
|
source = "registry+https://github.com/rust-lang/crates.io-index"
|
|
3385
3365
|
checksum = "09ec2a7bb152e2252b53fa7803150007879548bc709c039df7627cabbd05d469"
|
|
3386
3366
|
|
|
3387
|
-
[[package]]
|
|
3388
|
-
name = "windows_aarch64_msvc"
|
|
3389
|
-
version = "0.53.0"
|
|
3390
|
-
source = "registry+https://github.com/rust-lang/crates.io-index"
|
|
3391
|
-
checksum = "c7651a1f62a11b8cbd5e0d42526e55f2c99886c77e007179efff86c2b137e66c"
|
|
3392
|
-
|
|
3393
3367
|
[[package]]
|
|
3394
3368
|
name = "windows_i686_gnu"
|
|
3395
3369
|
version = "0.52.6"
|
|
3396
3370
|
source = "registry+https://github.com/rust-lang/crates.io-index"
|
|
3397
3371
|
checksum = "8e9b5ad5ab802e97eb8e295ac6720e509ee4c243f69d781394014ebfe8bbfa0b"
|
|
3398
3372
|
|
|
3399
|
-
[[package]]
|
|
3400
|
-
name = "windows_i686_gnu"
|
|
3401
|
-
version = "0.53.0"
|
|
3402
|
-
source = "registry+https://github.com/rust-lang/crates.io-index"
|
|
3403
|
-
checksum = "c1dc67659d35f387f5f6c479dc4e28f1d4bb90ddd1a5d3da2e5d97b42d6272c3"
|
|
3404
|
-
|
|
3405
3373
|
[[package]]
|
|
3406
3374
|
name = "windows_i686_gnullvm"
|
|
3407
3375
|
version = "0.52.6"
|
|
3408
3376
|
source = "registry+https://github.com/rust-lang/crates.io-index"
|
|
3409
3377
|
checksum = "0eee52d38c090b3caa76c563b86c3a4bd71ef1a819287c19d586d7334ae8ed66"
|
|
3410
3378
|
|
|
3411
|
-
[[package]]
|
|
3412
|
-
name = "windows_i686_gnullvm"
|
|
3413
|
-
version = "0.53.0"
|
|
3414
|
-
source = "registry+https://github.com/rust-lang/crates.io-index"
|
|
3415
|
-
checksum = "9ce6ccbdedbf6d6354471319e781c0dfef054c81fbc7cf83f338a4296c0cae11"
|
|
3416
|
-
|
|
3417
3379
|
[[package]]
|
|
3418
3380
|
name = "windows_i686_msvc"
|
|
3419
3381
|
version = "0.52.6"
|
|
3420
3382
|
source = "registry+https://github.com/rust-lang/crates.io-index"
|
|
3421
3383
|
checksum = "240948bc05c5e7c6dabba28bf89d89ffce3e303022809e73deaefe4f6ec56c66"
|
|
3422
3384
|
|
|
3423
|
-
[[package]]
|
|
3424
|
-
name = "windows_i686_msvc"
|
|
3425
|
-
version = "0.53.0"
|
|
3426
|
-
source = "registry+https://github.com/rust-lang/crates.io-index"
|
|
3427
|
-
checksum = "581fee95406bb13382d2f65cd4a908ca7b1e4c2f1917f143ba16efe98a589b5d"
|
|
3428
|
-
|
|
3429
3385
|
[[package]]
|
|
3430
3386
|
name = "windows_x86_64_gnu"
|
|
3431
3387
|
version = "0.52.6"
|
|
3432
3388
|
source = "registry+https://github.com/rust-lang/crates.io-index"
|
|
3433
3389
|
checksum = "147a5c80aabfbf0c7d901cb5895d1de30ef2907eb21fbbab29ca94c5b08b1a78"
|
|
3434
3390
|
|
|
3435
|
-
[[package]]
|
|
3436
|
-
name = "windows_x86_64_gnu"
|
|
3437
|
-
version = "0.53.0"
|
|
3438
|
-
source = "registry+https://github.com/rust-lang/crates.io-index"
|
|
3439
|
-
checksum = "2e55b5ac9ea33f2fc1716d1742db15574fd6fc8dadc51caab1c16a3d3b4190ba"
|
|
3440
|
-
|
|
3441
3391
|
[[package]]
|
|
3442
3392
|
name = "windows_x86_64_gnullvm"
|
|
3443
3393
|
version = "0.52.6"
|
|
3444
3394
|
source = "registry+https://github.com/rust-lang/crates.io-index"
|
|
3445
3395
|
checksum = "24d5b23dc417412679681396f2b49f3de8c1473deb516bd34410872eff51ed0d"
|
|
3446
3396
|
|
|
3447
|
-
[[package]]
|
|
3448
|
-
name = "windows_x86_64_gnullvm"
|
|
3449
|
-
version = "0.53.0"
|
|
3450
|
-
source = "registry+https://github.com/rust-lang/crates.io-index"
|
|
3451
|
-
checksum = "0a6e035dd0599267ce1ee132e51c27dd29437f63325753051e71dd9e42406c57"
|
|
3452
|
-
|
|
3453
3397
|
[[package]]
|
|
3454
3398
|
name = "windows_x86_64_msvc"
|
|
3455
3399
|
version = "0.52.6"
|
|
3456
3400
|
source = "registry+https://github.com/rust-lang/crates.io-index"
|
|
3457
3401
|
checksum = "589f6da84c646204747d1270a2a5661ea66ed1cced2631d546fdfb155959f9ec"
|
|
3458
3402
|
|
|
3459
|
-
[[package]]
|
|
3460
|
-
name = "windows_x86_64_msvc"
|
|
3461
|
-
version = "0.53.0"
|
|
3462
|
-
source = "registry+https://github.com/rust-lang/crates.io-index"
|
|
3463
|
-
checksum = "271414315aff87387382ec3d271b52d7ae78726f5d44ac98b4f4030c91880486"
|
|
3464
|
-
|
|
3465
3403
|
[[package]]
|
|
3466
3404
|
name = "wit-bindgen-rt"
|
|
3467
3405
|
version = "0.39.0"
|
|
@@ -3501,8 +3439,9 @@ checksum = "fdd20c5420375476fbd4394763288da7eb0cc0b8c11deed431a91562af7335d3"
|
|
|
3501
3439
|
|
|
3502
3440
|
[[package]]
|
|
3503
3441
|
name = "yamlpath"
|
|
3504
|
-
version = "0.
|
|
3442
|
+
version = "0.23.0"
|
|
3505
3443
|
dependencies = [
|
|
3444
|
+
"line-index",
|
|
3506
3445
|
"serde",
|
|
3507
3446
|
"serde_yaml",
|
|
3508
3447
|
"thiserror 2.0.12",
|
|
@@ -3631,7 +3570,7 @@ dependencies = [
|
|
|
3631
3570
|
|
|
3632
3571
|
[[package]]
|
|
3633
3572
|
name = "zizmor"
|
|
3634
|
-
version = "1.
|
|
3573
|
+
version = "1.10.0"
|
|
3635
3574
|
dependencies = [
|
|
3636
3575
|
"annotate-snippets",
|
|
3637
3576
|
"anstream",
|
|
@@ -11,23 +11,23 @@ license = "MIT"
|
|
|
11
11
|
|
|
12
12
|
[workspace.dependencies]
|
|
13
13
|
anyhow = "1.0.98"
|
|
14
|
-
github-actions-expressions = { path = "crates/github-actions-expressions", version = "0.0.
|
|
15
|
-
github-actions-models = { path = "crates/github-actions-models", version = "0.
|
|
14
|
+
github-actions-expressions = { path = "crates/github-actions-expressions", version = "0.0.7" }
|
|
15
|
+
github-actions-models = { path = "crates/github-actions-models", version = "0.31.0" }
|
|
16
16
|
itertools = "0.14.0"
|
|
17
|
-
pest = "2.8.
|
|
18
|
-
pest_derive = "2.8.
|
|
17
|
+
pest = "2.8.1"
|
|
18
|
+
pest_derive = "2.8.1"
|
|
19
19
|
pretty_assertions = "1.4.1"
|
|
20
20
|
annotate-snippets = "0.11.5"
|
|
21
|
-
anstream = "0.6.
|
|
21
|
+
anstream = "0.6.19"
|
|
22
22
|
assert_cmd = "2.0.17"
|
|
23
|
-
camino = "1.1.
|
|
24
|
-
clap = "4.5.
|
|
23
|
+
camino = "1.1.10"
|
|
24
|
+
clap = "4.5.40"
|
|
25
25
|
clap-verbosity-flag = { version = "3.0.3", default-features = false }
|
|
26
|
-
clap_complete = "4.5.
|
|
27
|
-
clap_complete_nushell = "4.5.
|
|
26
|
+
clap_complete = "4.5.54"
|
|
27
|
+
clap_complete_nushell = "4.5.7"
|
|
28
28
|
csv = "1.3.1"
|
|
29
29
|
etcetera = "0.10.0"
|
|
30
|
-
flate2 = "1.1.
|
|
30
|
+
flate2 = "1.1.2"
|
|
31
31
|
fst = "0.4.7"
|
|
32
32
|
http-cache-reqwest = "0.15.1"
|
|
33
33
|
human-panic = "2.0.1"
|
|
@@ -39,7 +39,7 @@ jsonschema = "0.30.0"
|
|
|
39
39
|
line-index = "0.1.2"
|
|
40
40
|
owo-colors = "4.2.1"
|
|
41
41
|
regex = "1.11.1"
|
|
42
|
-
reqwest = { version = "0.12.
|
|
42
|
+
reqwest = { version = "0.12.20", default-features = false }
|
|
43
43
|
reqwest-middleware = "0.4.2"
|
|
44
44
|
serde = { version = "1.0.219", features = ["derive"] }
|
|
45
45
|
serde-sarif = "0.8.0"
|
|
@@ -53,12 +53,20 @@ tokio = "1.45.1"
|
|
|
53
53
|
tracing = "0.1.41"
|
|
54
54
|
tracing-indicatif = "0.3.9"
|
|
55
55
|
tracing-subscriber = "0.3.19"
|
|
56
|
-
tree-sitter = "0.25.
|
|
56
|
+
tree-sitter = "0.25.6"
|
|
57
57
|
tree-sitter-bash = "0.23.3"
|
|
58
|
-
tree-sitter-powershell = "0.25.
|
|
59
|
-
yamlpath = { path = "crates/yamlpath", version = "0.
|
|
58
|
+
tree-sitter-powershell = "0.25.6"
|
|
59
|
+
yamlpath = { path = "crates/yamlpath", version = "0.23.0" }
|
|
60
60
|
tree-sitter-yaml = "0.7.1"
|
|
61
61
|
|
|
62
|
+
[workspace.lints.clippy]
|
|
63
|
+
dbg_macro = "warn"
|
|
64
|
+
todo = "warn"
|
|
65
|
+
unimplemented = "warn"
|
|
66
|
+
use_debug = "warn"
|
|
67
|
+
needless_lifetimes = "warn"
|
|
68
|
+
print_stderr = "warn"
|
|
69
|
+
print_stdout = "warn"
|
|
62
70
|
|
|
63
71
|
[profile.dev.package]
|
|
64
72
|
insta.opt-level = 3
|
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
Metadata-Version: 2.4
|
|
2
2
|
Name: zizmor
|
|
3
|
-
Version: 1.
|
|
3
|
+
Version: 1.10.0
|
|
4
4
|
License-File: LICENSE
|
|
5
5
|
Summary: Static analysis for GitHub Actions
|
|
6
6
|
Keywords: cli,github-actions,static-analysis,security
|
|
@@ -77,6 +77,20 @@ See [our contributing guide!](./CONTRIBUTING.md)
|
|
|
77
77
|
Astral
|
|
78
78
|
</a>
|
|
79
79
|
</td>
|
|
80
|
+
<td align="center" valign="top" width="15%">
|
|
81
|
+
<a href="https://grafana.com/">
|
|
82
|
+
<img src="https://avatars.githubusercontent.com/u/7195757?s=100&v=4" width="100px">
|
|
83
|
+
<br>
|
|
84
|
+
Grafana Labs
|
|
85
|
+
</a>
|
|
86
|
+
</td>
|
|
87
|
+
<td align="center" valign="top" width="15%">
|
|
88
|
+
<a href="https://trailofbits.com/">
|
|
89
|
+
<img src="https://avatars.githubusercontent.com/u/2314423?s=100&v=4" width="100px">
|
|
90
|
+
<br>
|
|
91
|
+
Trail of Bits
|
|
92
|
+
</a>
|
|
93
|
+
</td>
|
|
80
94
|
</tr>
|
|
81
95
|
</tbody>
|
|
82
96
|
</table>
|
|
@@ -2,7 +2,7 @@
|
|
|
2
2
|
name = "github-actions-expressions"
|
|
3
3
|
description = "GitHub Actions expression parser and data types"
|
|
4
4
|
repository = "https://github.com/zizmorcore/zizmor/tree/main/crates/github-actions-expressions"
|
|
5
|
-
version = "0.0.
|
|
5
|
+
version = "0.0.7"
|
|
6
6
|
readme = "README.md"
|
|
7
7
|
|
|
8
8
|
homepage.workspace = true
|
|
@@ -10,6 +10,9 @@ license.workspace = true
|
|
|
10
10
|
authors.workspace = true
|
|
11
11
|
edition.workspace = true
|
|
12
12
|
|
|
13
|
+
[lints]
|
|
14
|
+
workspace = true
|
|
15
|
+
|
|
13
16
|
[dependencies]
|
|
14
17
|
anyhow.workspace = true
|
|
15
18
|
pest.workspace = true
|