From 2a95e0ec71a66d84eaf28f4d25bca7e666190d70 Mon Sep 17 00:00:00 2001 From: Olivier Vernin Date: Thu, 10 Sep 2026 15:11:14 +0200 Subject: [PATCH] fix: set GITHUB_TOKEN for zizmor Signed-off-by: Olivier Vernin --- .github/workflows/updatecli.yaml | 4 ++++ .github/workflows/updatecli_test.yaml | 4 ++++ .github/workflows/updatecli_update.yaml | 4 ++++ 3 files changed, 12 insertions(+) diff --git a/.github/workflows/updatecli.yaml b/.github/workflows/updatecli.yaml index 7934b37..c7a423a 100644 --- a/.github/workflows/updatecli.yaml +++ b/.github/workflows/updatecli.yaml @@ -40,3 +40,7 @@ jobs: UPDATECLI_UDASH_API_URL: ${{ secrets.UPDATECLI_UDASH_API_URL }} UPDATECLI_UDASH_ACCESS_TOKEN: ${{ secrets.UPDATECLI_UDASH_ACCESS_TOKEN }} UPDATECLI_UDASH_URL: ${{ secrets.UPDATECLI_UDASH_URL }} + ## The Github token seems to be needed by Zizmor + # https://github.com/updatecli/policies/blob/main/updatecli/policies/zizmor/githubaction/scaffold/updatecli.d/default.yaml#L106 + # Adding for now just for testing + GITHUB_TOKEN: "" diff --git a/.github/workflows/updatecli_test.yaml b/.github/workflows/updatecli_test.yaml index 94edabe..a9cdd9d 100644 --- a/.github/workflows/updatecli_test.yaml +++ b/.github/workflows/updatecli_test.yaml @@ -35,3 +35,7 @@ jobs: # This step is executed in untrusted context. We use a GitHub token with minimal permissions. UPDATECLI_GITHUB_USERNAME: ${{ github.actor }} UPDATECLI_GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} + ## The Github token seems to be needed by Zizmor + # https://github.com/updatecli/policies/blob/main/updatecli/policies/zizmor/githubaction/scaffold/updatecli.d/default.yaml#L106 + # Adding for now just for testing + GITHUB_TOKEN: "" diff --git a/.github/workflows/updatecli_update.yaml b/.github/workflows/updatecli_update.yaml index cb0eca9..18c9883 100644 --- a/.github/workflows/updatecli_update.yaml +++ b/.github/workflows/updatecli_update.yaml @@ -52,3 +52,7 @@ jobs: UPDATECLI_UDASH_API_URL: ${{ secrets.UPDATECLI_UDASH_API_URL }} UPDATECLI_UDASH_ACCESS_TOKEN: ${{ secrets.UPDATECLI_UDASH_ACCESS_TOKEN }} UPDATECLI_UDASH_URL: ${{ secrets.UPDATECLI_UDASH_URL }} + ## The Github token seems to be needed by Zizmor + # https://github.com/updatecli/policies/blob/main/updatecli/policies/zizmor/githubaction/scaffold/updatecli.d/default.yaml#L106 + # Adding for now just for testing + GITHUB_TOKEN: ""