GitHub Actions security analysis with zizmor

Add Qlty code coverage reporting to CI #5

Sign in to view logs

Triggered via pull request March 18, 2026 14:10

davehenton

opened #5953

dh-sandbox:qlty-coverage-integration

Status Failure

Total duration 14s

Artifacts –

zizmor.yaml

on: pull_request

Annotations

2 errors and 1 warning

Process completed with exit code 14.

unpinned-uses: .github/workflows/tests.yaml#L45

tests.yaml:45: unpinned action reference: action is not pinned to a hash (required by blanket policy)

secrets-outside-env: .github/workflows/tests.yaml#L48

tests.yaml:48: secrets referenced without a dedicated environment: secret is accessed outside of a dedicated environment