Remove zizmor.yml suppression config and fix all workflow security findings by Copilot · Pull Request #8005 · nextcloud/all-in-one

Copilot · 2026-04-27T00:49:15Z

No description provided.

Agent-Logs-Url: https://github.com/nextcloud/all-in-one/sessions/19702b0d-13f7-43fb-bc62-d2cdca2232b5 Co-authored-by: szaimen <42591237+szaimen@users.noreply.github.com>

Agent-Logs-Url: https://github.com/nextcloud/all-in-one/sessions/c165a969-ebb0-4afd-ac19-c02c3887bc94 Co-authored-by: szaimen <42591237+szaimen@users.noreply.github.com>

szaimen · 2026-04-27T08:26:00Z

-    - uses: shivammathur/setup-php@7bf05c6b704e0b9bfee22300130a31b5ea68d593 # v2
+      with:
+        persist-credentials: false
+    - uses: shivammathur/setup-php@accd6127cb78bee3e8082180cb391013d204ef9f # master


szaimen · 2026-04-27T08:26:12Z

    steps:
      - name: "Check latest published release isn't a prerelease"
-        uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v6
+        uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0


szaimen · 2026-04-27T08:26:22Z


      - name: Turnstyle
-        uses: softprops/turnstyle@e565d2d86403c5d23533937e95980570545e5586 # v2
+        uses: softprops/turnstyle@e565d2d86403c5d23533937e95980570545e5586 # v3.2.3


szaimen · 2026-04-27T08:26:34Z


    - name: Create Pull Request
-      uses: peter-evans/create-pull-request@5f6978faf089d4d20b00c7766989d076bb2fc7f1 # v7
+      uses: peter-evans/create-pull-request@5f6978faf089d4d20b00c7766989d076bb2fc7f1 # v8.1.1


szaimen · 2026-04-27T08:26:42Z


      - name: Set up php ${{ matrix.php-versions }}
-        uses: shivammathur/setup-php@accd6127cb78bee3e8082180cb391013d204ef9f # v2.37.0
+        uses: shivammathur/setup-php@accd6127cb78bee3e8082180cb391013d204ef9f # master


szaimen · 2026-04-27T08:26:49Z

    runs-on: ubuntu-latest
    steps:
-      - uses: dessant/lock-threads@7266a7ce5c1df01b1c6db85bf8cd86c737dadbe7 # v5
+      - uses: dessant/lock-threads@7266a7ce5c1df01b1c6db85bf8cd86c737dadbe7 # v6.0.0


szaimen · 2026-04-27T08:26:55Z


    - name: Create Pull Request
-      uses: peter-evans/create-pull-request@5f6978faf089d4d20b00c7766989d076bb2fc7f1 # v7
+      uses: peter-evans/create-pull-request@5f6978faf089d4d20b00c7766989d076bb2fc7f1 # v8.1.1


szaimen · 2026-04-27T08:26:59Z

+          persist-credentials: false
      - name: Set up php
-        uses: shivammathur/setup-php@7bf05c6b704e0b9bfee22300130a31b5ea68d593 # v2
+        uses: shivammathur/setup-php@accd6127cb78bee3e8082180cb391013d204ef9f # master


szaimen · 2026-04-27T08:27:04Z


      - name: Set up php 8.5
-        uses: shivammathur/setup-php@accd6127cb78bee3e8082180cb391013d204ef9f # v2.37.0
+        uses: shivammathur/setup-php@accd6127cb78bee3e8082180cb391013d204ef9f # master


szaimen · 2026-04-27T08:27:15Z


      - name: Set up php
-        uses: shivammathur/setup-php@7bf05c6b704e0b9bfee22300130a31b5ea68d593 # v2
+        uses: shivammathur/setup-php@accd6127cb78bee3e8082180cb391013d204ef9f # master


szaimen · 2026-04-27T08:27:19Z


      - name: Create Pull Request
-        uses: peter-evans/create-pull-request@5f6978faf089d4d20b00c7766989d076bb2fc7f1 # v7
+        uses: peter-evans/create-pull-request@5f6978faf089d4d20b00c7766989d076bb2fc7f1 # v8.1.1


szaimen · 2026-04-27T08:27:24Z


      - name: Set up php
-        uses: shivammathur/setup-php@accd6127cb78bee3e8082180cb391013d204ef9f # v2.37.0
+        uses: shivammathur/setup-php@accd6127cb78bee3e8082180cb391013d204ef9f # master


szaimen · 2026-04-27T08:27:35Z

+        persist-credentials: false
    - name: Run Shellcheck
-      uses: ludeeus/action-shellcheck@00cae500b08a931fb5698e11e79bfbd38e612a38 # v2.0.0
+      uses: ludeeus/action-shellcheck@00cae500b08a931fb5698e11e79bfbd38e612a38 # 2.0.0


szaimen · 2026-04-27T08:27:40Z


    - name: Create Pull Request
-      uses: peter-evans/create-pull-request@5f6978faf089d4d20b00c7766989d076bb2fc7f1 # v7
+      uses: peter-evans/create-pull-request@5f6978faf089d4d20b00c7766989d076bb2fc7f1 # v8.1.1


szaimen · 2026-04-27T08:27:44Z


      - name: Set up php ${{ matrix.php-versions }}
-        uses: shivammathur/setup-php@7bf05c6b704e0b9bfee22300130a31b5ea68d593 # v2
+        uses: shivammathur/setup-php@accd6127cb78bee3e8082180cb391013d204ef9f # master


szaimen · 2026-04-27T08:27:52Z

          fi
      - name: Create Pull Request
-        uses: peter-evans/create-pull-request@5f6978faf089d4d20b00c7766989d076bb2fc7f1 # v7
+        uses: peter-evans/create-pull-request@5f6978faf089d4d20b00c7766989d076bb2fc7f1 # v8.1.1


szaimen · 2026-04-27T08:27:57Z

          sudo bash manual-install/update-yaml.sh
      - name: Create Pull Request
-        uses: peter-evans/create-pull-request@5f6978faf089d4d20b00c7766989d076bb2fc7f1 # v7
+        uses: peter-evans/create-pull-request@5f6978faf089d4d20b00c7766989d076bb2fc7f1 # v8.1.1


szaimen · 2026-04-27T08:28:03Z


    - name: Create Pull Request
-      uses: peter-evans/create-pull-request@5f6978faf089d4d20b00c7766989d076bb2fc7f1 # v7
+      uses: peter-evans/create-pull-request@5f6978faf089d4d20b00c7766989d076bb2fc7f1 # v8.1.1


szaimen · 2026-04-27T08:28:09Z


    - name: Create Pull Request
-      uses: peter-evans/create-pull-request@5f6978faf089d4d20b00c7766989d076bb2fc7f1 # v7
+      uses: peter-evans/create-pull-request@5f6978faf089d4d20b00c7766989d076bb2fc7f1 # v8.1.1


szaimen · 2026-04-27T08:28:23Z


    - name: Create Pull Request
-      uses: peter-evans/create-pull-request@5f6978faf089d4d20b00c7766989d076bb2fc7f1 # v7
+      uses: peter-evans/create-pull-request@5f6978faf089d4d20b00c7766989d076bb2fc7f1 # v8.1.1


Copilot AI and others added 2 commits April 27, 2026 00:46

plan: fix all zizmor issues and remove zizmor.yml

d30132f

Agent-Logs-Url: https://github.com/nextcloud/all-in-one/sessions/19702b0d-13f7-43fb-bc62-d2cdca2232b5 Co-authored-by: szaimen <42591237+szaimen@users.noreply.github.com>

fix: remove zizmor.yml and fix all workflow security issues

aae2112

Agent-Logs-Url: https://github.com/nextcloud/all-in-one/sessions/19702b0d-13f7-43fb-bc62-d2cdca2232b5 Co-authored-by: szaimen <42591237+szaimen@users.noreply.github.com>

Copilot AI assigned Copilot and szaimen Apr 27, 2026

Copilot created this pull request from a session on behalf of szaimen April 27, 2026 00:49 View session

szaimen added 3. to review Waiting for reviews enhancement New feature or request labels Apr 27, 2026

szaimen added this to the next milestone Apr 27, 2026

Copilot started work on behalf of szaimen April 27, 2026 00:51 View session

fix: add persist-credentials: false to all checkout steps (artipacked)

4c47d20

Agent-Logs-Url: https://github.com/nextcloud/all-in-one/sessions/c165a969-ebb0-4afd-ac19-c02c3887bc94 Co-authored-by: szaimen <42591237+szaimen@users.noreply.github.com>

Copilot AI requested a review from szaimen April 27, 2026 00:55

Copilot finished work on behalf of szaimen April 27, 2026 00:55

szaimen marked this pull request as ready for review April 27, 2026 00:57

szaimen reviewed Apr 27, 2026

View reviewed changes

szaimen added 2. developing Work in progress and removed 3. to review Waiting for reviews labels Apr 27, 2026

This was referenced Apr 27, 2026

publish new images after recent PRs are merged and tested #7862

Open

publish new images after recent PRs are merged and tested #8033

Open

szaimen modified the milestones: v13.0.0, next Apr 30, 2026

Conversation

Copilot AI commented Apr 27, 2026 • edited by szaimen Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Copilot AI commented Apr 27, 2026 •

edited by szaimen

Loading