You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@iceberg.apache.org by ga...@apache.org on 2026/04/17 03:28:30 UTC
(iceberg-cpp) branch main updated: ci: set zizmor min-severity and min-confidence to medium (#620)
This is an automated email from the ASF dual-hosted git repository.
gangwu pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/iceberg-cpp.git
The following commit(s) were added to refs/heads/main by this push:
new 8adb3043 ci: set zizmor min-severity and min-confidence to medium (#620)
8adb3043 is described below
commit 8adb304350f734c1c5b64a27a386273107972ec6
Author: Kevin Liu <ke...@users.noreply.github.com>
AuthorDate: Thu Apr 16 20:28:24 2026 -0700
ci: set zizmor min-severity and min-confidence to medium (#620)
Part of https://github.com/apache/iceberg/issues/16000
Gets rid of `zizmor: ignore[cache-poisoning]`, its low confidence.
Set `min-severity: medium` and `min-confidence: medium` in
`.github/workflows/zizmor.yml`
Validated locally:
```
GH_TOKEN=`gh auth token` uvx zizmor --min-severity medium --min-confidence medium .github/
```
---
.github/workflows/test.yml | 2 +-
.github/workflows/zizmor.yml | 2 ++
2 files changed, 3 insertions(+), 1 deletion(-)
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index 40b42954..37f98bd0 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -123,7 +123,7 @@ jobs:
run: |
vcpkg install zlib:x64-windows nlohmann-json:x64-windows nanoarrow:x64-windows roaring:x64-windows cpr:x64-windows
- name: Setup sccache
- uses: mozilla-actions/sccache-action@7d986dd989559c6ecdb630a3fd2557667be217ad # v0.0.9 # zizmor: ignore[cache-poisoning] -- only used for build caching, no artifacts published
+ uses: mozilla-actions/sccache-action@7d986dd989559c6ecdb630a3fd2557667be217ad # v0.0.9
- name: Start MinIO
shell: bash
run: bash ci/scripts/start_minio.sh
diff --git a/.github/workflows/zizmor.yml b/.github/workflows/zizmor.yml
index 5ac3f30e..eb40be7e 100644
--- a/.github/workflows/zizmor.yml
+++ b/.github/workflows/zizmor.yml
@@ -42,3 +42,5 @@ jobs:
uses: zizmorcore/zizmor-action@71321a20a9ded102f6e9ce5718a2fcec2c4f70d8 # v0.5.2
with:
advanced-security: false
+ min-severity: medium
+ min-confidence: medium