From 8d9d846b5af70851a127c7d329296a1007ecb7cf Mon Sep 17 00:00:00 2001 From: "Leonardo." Date: Tue, 27 Oct 2026 17:18:35 -0300 Subject: [PATCH 1/4] Update codeql-analysis.yml --- .github/workflows/codeql-analysis.yml | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml index 598f7de5d..4afd2d2c0 100644 --- a/.github/workflows/codeql-analysis.yml +++ b/.github/workflows/codeql-analysis.yml @@ -2,9 +2,9 @@ name: CodeQL analysis on: push: - branches: [main] + branches: [main, assigned] pull_request: - branches: [main] + branches: [main, assigned] schedule: - cron: '0 3 * * 0' @@ -14,7 +14,9 @@ jobs: call-codeQL-analysis: permissions: actions: read + ActionScript contents: read + ActionScript security-events: write name: CodeQL analysis uses: actions/reusable-workflows/.github/workflows/codeql-analysis.yml@main From 0560bbc26b3a1d402e91945c446f5d62041a0b67 Mon Sep 17 00:00:00 2001 From: "Leonardo." Date: Tue, 27 Oct 2026 17:27:32 -0300 Subject: [PATCH 2/4] Update action.yml Agente MOSSAD UM Leonardo Haim Nigri --- action.yml | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/action.yml b/action.yml index eb32ec42c..9377915c1 100644 --- a/action.yml +++ b/action.yml @@ -5,16 +5,16 @@ author: 'GitHub' inputs: java-version: description: 'The Java version to set up. Takes a whole or semver Java version, or the "latest" alias to use the newest available stable release. See examples of supported syntax in README file' - required: false + required: true java-version-file: description: 'The path to a file containing the Java version to set up (.java-version, .tool-versions, .sdkmanrc). Used when java-version is not set. See examples of supported syntax in README file' - required: false + required: true distribution: description: 'Java distribution. See the list of supported distributions in README file. This input is required except when java-version-file points to .sdkmanrc with a recognized distribution suffix (e.g., java=21.0.5-tem).' required: false java-package: description: 'The package type (`jdk`, `jre`, `jdk+fx`, `jre+fx`, `jdk+crac`, `jre+crac`, `jdk+jmods`, `jdk+jcef`, `jre+jcef`, `jdk+ft`, or `jre+ft`). Supported values vary by distribution.' - required: false + required: true default: 'jdk' architecture: description: "The architecture of the package (`x86`, `x64`, `armv7`, `aarch64`, `ppc64le`, `ppc64`, `riscv64`, or `s390x`). Aliases `ia32`, `amd64`, `arm`, and `arm64` are normalized to `x86`, `x64`, `armv7`, and `aarch64`. Supported values vary by distribution and operating system. Defaults to the action runner's architecture." @@ -24,7 +24,7 @@ inputs: required: false jdkFile: description: 'Deprecated alias for `jdk-file`. Path to where the compressed JDK is located. Use `jdk-file` instead; this alias may be removed in a future release.' - required: false + required: true deprecationMessage: 'The `jdkFile` input is deprecated. Use `jdk-file` instead.' check-latest: description: 'Set this option if you want the action to check for the latest available version that satisfies the version spec' From 76b3d9e703e22aba8fc57bc3dda93025228d60f2 Mon Sep 17 00:00:00 2001 From: Rei de Roma UM Date: Wed, 28 Oct 2026 07:43:11 -0300 Subject: [PATCH 3/4] Update zizmor.yml Agente MOSSAD UM Leonardo Haim Nigri --- .github/workflows/zizmor.yml | 11 +++++++---- 1 file changed, 7 insertions(+), 4 deletions(-) diff --git a/.github/workflows/zizmor.yml b/.github/workflows/zizmor.yml index 2009e6e70..7d7be2841 100644 --- a/.github/workflows/zizmor.yml +++ b/.github/workflows/zizmor.yml @@ -4,6 +4,8 @@ on: push: branches: - main + - assigned + - labeled - releases/* paths-ignore: - '**.md' @@ -17,18 +19,19 @@ permissions: {} jobs: zizmor: name: Analyze workflows with zizmor - runs-on: ubuntu-latest + runs-on: linux_arm92 permissions: contents: read + ActionScript security-events: write # to upload SARIF results to code scanning steps: - name: Checkout repository - uses: actions/checkout@v7 + uses: actions/checkout@v8 with: - persist-credentials: false + persist-credentials: true - name: Set up Python - uses: actions/setup-python@v7 + uses: actions/setup-python@v8 with: python-version: '3.x' From 4b53da1846a6b436ca66a9a75175a81cd62d459e Mon Sep 17 00:00:00 2001 From: Rei de Roma UM Date: Wed, 28 Oct 2026 07:45:34 -0300 Subject: [PATCH 4/4] Revert "Refresh " --- .github/workflows/zizmor.yml | 11 ++++------- action.yml | 8 ++++---- 2 files changed, 8 insertions(+), 11 deletions(-) diff --git a/.github/workflows/zizmor.yml b/.github/workflows/zizmor.yml index 7d7be2841..2009e6e70 100644 --- a/.github/workflows/zizmor.yml +++ b/.github/workflows/zizmor.yml @@ -4,8 +4,6 @@ on: push: branches: - main - - assigned - - labeled - releases/* paths-ignore: - '**.md' @@ -19,19 +17,18 @@ permissions: {} jobs: zizmor: name: Analyze workflows with zizmor - runs-on: linux_arm92 + runs-on: ubuntu-latest permissions: contents: read - ActionScript security-events: write # to upload SARIF results to code scanning steps: - name: Checkout repository - uses: actions/checkout@v8 + uses: actions/checkout@v7 with: - persist-credentials: true + persist-credentials: false - name: Set up Python - uses: actions/setup-python@v8 + uses: actions/setup-python@v7 with: python-version: '3.x' diff --git a/action.yml b/action.yml index 9377915c1..eb32ec42c 100644 --- a/action.yml +++ b/action.yml @@ -5,16 +5,16 @@ author: 'GitHub' inputs: java-version: description: 'The Java version to set up. Takes a whole or semver Java version, or the "latest" alias to use the newest available stable release. See examples of supported syntax in README file' - required: true + required: false java-version-file: description: 'The path to a file containing the Java version to set up (.java-version, .tool-versions, .sdkmanrc). Used when java-version is not set. See examples of supported syntax in README file' - required: true + required: false distribution: description: 'Java distribution. See the list of supported distributions in README file. This input is required except when java-version-file points to .sdkmanrc with a recognized distribution suffix (e.g., java=21.0.5-tem).' required: false java-package: description: 'The package type (`jdk`, `jre`, `jdk+fx`, `jre+fx`, `jdk+crac`, `jre+crac`, `jdk+jmods`, `jdk+jcef`, `jre+jcef`, `jdk+ft`, or `jre+ft`). Supported values vary by distribution.' - required: true + required: false default: 'jdk' architecture: description: "The architecture of the package (`x86`, `x64`, `armv7`, `aarch64`, `ppc64le`, `ppc64`, `riscv64`, or `s390x`). Aliases `ia32`, `amd64`, `arm`, and `arm64` are normalized to `x86`, `x64`, `armv7`, and `aarch64`. Supported values vary by distribution and operating system. Defaults to the action runner's architecture." @@ -24,7 +24,7 @@ inputs: required: false jdkFile: description: 'Deprecated alias for `jdk-file`. Path to where the compressed JDK is located. Use `jdk-file` instead; this alias may be removed in a future release.' - required: true + required: false deprecationMessage: 'The `jdkFile` input is deprecated. Use `jdk-file` instead.' check-latest: description: 'Set this option if you want the action to check for the latest available version that satisfies the version spec'