Skip to content

Merge pull request #810 from modeseven-lfit/chore/bump-sonarqube-scan… #487

Merge pull request #810 from modeseven-lfit/chore/bump-sonarqube-scan…

Merge pull request #810 from modeseven-lfit/chore/bump-sonarqube-scan… #487

Triggered via push July 22, 2026 11:27
Status Success
Total duration 53s
Artifacts 1

zizmor.yaml

on: push
Audit Workflows
25s
Audit Workflows
Publish SARIF
22s
Publish SARIF
Fit to window
Zoom out
Zoom in

Annotations

10 errors
zizmor: zizmor/template-injection: .github/workflows/compose-info-yaml-verify-testing.yaml#L109
code injection via template expansion: may expand into attacker-controllable code
zizmor: zizmor/template-injection: .github/workflows/compose-docker-verify.yaml#L121
code injection via template expansion: may expand into attacker-controllable code
zizmor: zizmor/template-injection: .github/workflows/compose-docker-verify.yaml#L113
code injection via template expansion: may expand into attacker-controllable code
zizmor: zizmor/template-injection: .github/workflows/compose-docker-verify.yaml#L112
code injection via template expansion: may expand into attacker-controllable code
zizmor: zizmor/template-injection: .github/workflows/compose-docker-verify.yaml#L110
code injection via template expansion: may expand into attacker-controllable code
zizmor: zizmor/template-injection: .github/workflows/compose-docker-verify.yaml#L109
code injection via template expansion: may expand into attacker-controllable code
zizmor: zizmor/template-injection: .github/workflows/compose-docker-verify.yaml#L108
code injection via template expansion: may expand into attacker-controllable code
zizmor: zizmor/template-injection: .github/workflows/compose-docker-verify.yaml#L106
code injection via template expansion: may expand into attacker-controllable code
zizmor: zizmor/template-injection: .github/workflows/compose-docker-release-verify.yaml#L97
code injection via template expansion: may expand into attacker-controllable code
zizmor: zizmor/template-injection: .github/workflows/compose-docker-release-verify.yaml#L97
code injection via template expansion: may expand into attacker-controllable code

Artifacts

Produced during runtime
Name Size Digest
zizmor-sarif Expired
92.6 KB
sha256:429290381345e743a51b42e0e14418775a1e8e3274951b3c752180f4bd0158a9