build(deps): bump zizmorcore/zizmor-action from 0.5.2 to 0.5.3 (#121) #62
dsanders11Annotations
2 errors and 3 warnings
|
zizmor
Process completed with exit code 14.
|
|
dangerous-triggers:
.github/workflows/semantic-commits.yml#L3
semantic-commits.yml:3: use of fundamentally insecure workflow trigger: pull_request_target is almost always used insecurely
|
|
artipacked:
.github/workflows/release.yml#L23
release.yml:23: credential persistence through GitHub Actions artifacts: does not set persist-credentials: false
|
|
artipacked:
.github/workflows/lint.yml#L25
lint.yml:25: credential persistence through GitHub Actions artifacts: does not set persist-credentials: false
|
|
dependabot-cooldown:
.github/dependabot.yml#L3
dependabot.yml:3: insufficient cooldown in Dependabot updates: missing cooldown configuration
|