This is an automated email from the ASF dual-hosted git repository.
jojochuang pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/ozone-site.git
The following commit(s) were added to refs/heads/master by this push:
new cbb33af99b HDDS-15725. zizmor check should reflect failure in fork
(#483)
cbb33af99b is described below
commit cbb33af99b6d0eaf92798e8e6f95c93f6276ced5
Author: Doroszlai, Attila <[email protected]>
AuthorDate: Mon Jul 6 23:33:28 2026 +0200
HDDS-15725. zizmor check should reflect failure in fork (#483)
---
.github/workflows/static.yml | 3 ---
.github/workflows/zizmor.yml | 12 ++++++++++++
Dockerfile | 1 -
3 files changed, 12 insertions(+), 4 deletions(-)
diff --git a/.github/workflows/static.yml b/.github/workflows/static.yml
index be77bdf725..fe02d0cce8 100644
--- a/.github/workflows/static.yml
+++ b/.github/workflows/static.yml
@@ -62,7 +62,6 @@ jobs:
persist-credentials: false
- name: Enable corepack
run: |
- npm i -g --force corepack # see
https://github.com/actions/setup-node/issues/1222
corepack enable
- name: Use Node.js ${{ env.node_version }}
uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e #
v6.4.0
@@ -88,7 +87,6 @@ jobs:
persist-credentials: false
- name: Enable corepack
run: |
- npm i -g --force corepack # see
https://github.com/actions/setup-node/issues/1222
corepack enable
- name: Use Node.js ${{ env.node_version }}
uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e #
v6.4.0
@@ -108,7 +106,6 @@ jobs:
persist-credentials: false
- name: Enable corepack
run: |
- npm i -g --force corepack # see
https://github.com/actions/setup-node/issues/1222
corepack enable
- name: Use Node.js ${{ env.node_version }}
uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e #
v6.4.0
diff --git a/.github/workflows/zizmor.yml b/.github/workflows/zizmor.yml
index 2f7b2ea577..a19bf98b71 100644
--- a/.github/workflows/zizmor.yml
+++ b/.github/workflows/zizmor.yml
@@ -20,10 +20,20 @@ on:
branches-ignore:
- automated-config-doc-update
- dependabot/**
+ paths:
+ - .github/workflows/**
pull_request:
+ paths:
+ - .github/workflows/**
permissions: { }
+concurrency:
+ group: >
+ ${{ github.workflow }}-
+ ${{ github.event.pull_request.number || case(github.repository_owner ==
'apache', github.sha, github.ref_name) }}
+ cancel-in-progress: ${{ github.event_name == 'pull_request' ||
github.repository_owner != 'apache' }}
+
jobs:
zizmor:
runs-on: ubuntu-latest
@@ -37,3 +47,5 @@ jobs:
- name: Run zizmor
uses: zizmorcore/zizmor-action@192e21d79ab29983730a13d1382995c2307fbcaa
# v0.5.7
+ with:
+ advanced-security: ${{ github.repository_owner == 'apache' }}
diff --git a/Dockerfile b/Dockerfile
index be3472837f..4ce85b8300 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -20,7 +20,6 @@ FROM node:${NODE_VERSION}-slim AS base
# Creates store at /pnpm/store by default.
ENV PNPM_HOME="/pnpm"
ENV PATH="$PNPM_HOME:$PATH"
-RUN npm i -g --force corepack # see
https://github.com/actions/setup-node/issues/1222
RUN corepack enable
# Install dependencies to /ozone-site/node_modules as part of the image.
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
