Fix sync-zizmor-versions (#69)

Co-authored-by: woodruffw <3059210+woodruffw@users.noreply.github.com>
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>

Author: woodruffw

.github/workflows/selftest.yml

@@ -5,6 +5,11 @@ on:
     branches:
       - main
   pull_request:
+    types:
+      - opened
+      - synchronize
+      - reopened
+      - ready_for_review
   workflow_dispatch:
 
 permissions: {}
@@ -168,6 +173,7 @@ jobs:
     needs:
       - selftest
       - selftest-version
+      - selftest-version-nonexistent-xfail
       - selftest-plain
       - selftest-plain-gha-hazmat-xfail
       - selftest-plain-gha-hazmat-offline-audits-xfail

.github/workflows/sync-zizmor-versions.yml

@@ -1,7 +1,6 @@
 on:
   schedule:
-    # every hour
-    - cron: "0 * * * *"
+    - cron: "0 * * * *" # every hour
   workflow_dispatch:
 
 name: Sync zizmor versions
@@ -22,10 +21,10 @@ jobs:
           persist-credentials: false
 
       - name: Install dependencies
-        run: apt install -y skopeo jq
+        run: sudo apt install -y skopeo jq
 
       - name: Sync zizmor versions
-        run: ./support/sync-zizmor-versions.sh > ./support/zizmor-versions
+        run: ./support/sync-zizmor-versions.sh > ./support/versions
 
       - name: Create or update pull request
         uses: peter-evans/create-pull-request@98357b18bf14b5342f975ff684046ec3b2a07725 # v8.0.0
@@ -34,6 +33,15 @@ jobs:
           delete-branch: true
           commit-message: Sync zizmor versions
           title: Sync zizmor versions
-          body: This PR was created automatically to sync the zizmor versions used in workflows and other places.
+          body: |
+            :robot: :warning: :robot:
+
+            Changes were detected to the `ghcr.io/zizmorcore/zizmor` image's tags.
+
+            This PR updates the `versions` file with any tag and digest changes.
+
+            Please review manually before merging.
+
+            Cross-reference: <https://ghcr.io/zizmorcore/zizmor>
           assignees: woodruffw
           draft: true

support/versions

@@ -1,4 +1,5 @@
 latest sha256:4a574a15fc2bfb6c3b30db75410f1faeb7a94b5355d46dcbd32309047dd6d097
+1.7.0 sha256:05a722e7c356725b7d7ea9c563871fe0afe511e5d7c114e14f4b07a196e5b022
 1.6.0 sha256:c92dceb026c6858fd51814baf6b9bdc4328c0a36abf42dfa1bdc59f69a1deb77
 1.8.0 sha256:4d3128ae1370da9507bdd42a62d72b8304d4d0f290147aaac3eb0ebf51d70890
 1.9.0 sha256:ecb5e81e47bdb9e61ffa26b3def736ef4a6842d25e106986fd9dc579da0c9a68