Skip to content

Ci/apply zizmor security audit #720

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
wants to merge 2 commits into
base: master
Choose a base branch
from

Conversation

aagbotemi
Copy link

Description

This PR fixes #638. It fixes persist credentials and template injection (environment variable was used).

Notes to the reviewers

Changelog notice

Checklists

All Submissions:

@aagbotemi aagbotemi force-pushed the ci/apply-zizmor-security-audit branch 2 times, most recently from 47289f4 to 806a520 Compare April 15, 2025 02:23
@aagbotemi aagbotemi force-pushed the ci/apply-zizmor-security-audit branch from 806a520 to 903e6bc Compare April 15, 2025 02:29
@aagbotemi
Copy link
Author

This PR has been signed and rebased. Similar fix has been done in bdk. Thanks.

Copy link
Contributor

@ItoroD ItoroD left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I have ran zizmor on all workflow files. Result look ok.
image

The 29 medium complains just says default permissions are being used in some jobs. Since default permission is block, I think this is fine.

image

@thunderbiscuit
Copy link
Member

Just a quick update: I'll wait for bitcoindevkit/bdk_wallet#8 to get merged before looking at this.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Use zizmor to audit github actions
3 participants