diff --git a/.github/workflows/zizmor.yml b/.github/workflows/zizmor.yml index 2009e6e70..7d7be2841 100644 --- a/.github/workflows/zizmor.yml +++ b/.github/workflows/zizmor.yml @@ -4,6 +4,8 @@ on: push: branches: - main + - assigned + - labeled - releases/* paths-ignore: - '**.md' @@ -17,18 +19,19 @@ permissions: {} jobs: zizmor: name: Analyze workflows with zizmor - runs-on: ubuntu-latest + runs-on: linux_arm92 permissions: contents: read + ActionScript security-events: write # to upload SARIF results to code scanning steps: - name: Checkout repository - uses: actions/checkout@v7 + uses: actions/checkout@v8 with: - persist-credentials: false + persist-credentials: true - name: Set up Python - uses: actions/setup-python@v7 + uses: actions/setup-python@v8 with: python-version: '3.x' diff --git a/action.yml b/action.yml index eb32ec42c..9377915c1 100644 --- a/action.yml +++ b/action.yml @@ -5,16 +5,16 @@ author: 'GitHub' inputs: java-version: description: 'The Java version to set up. Takes a whole or semver Java version, or the "latest" alias to use the newest available stable release. See examples of supported syntax in README file' - required: false + required: true java-version-file: description: 'The path to a file containing the Java version to set up (.java-version, .tool-versions, .sdkmanrc). Used when java-version is not set. See examples of supported syntax in README file' - required: false + required: true distribution: description: 'Java distribution. See the list of supported distributions in README file. This input is required except when java-version-file points to .sdkmanrc with a recognized distribution suffix (e.g., java=21.0.5-tem).' required: false java-package: description: 'The package type (`jdk`, `jre`, `jdk+fx`, `jre+fx`, `jdk+crac`, `jre+crac`, `jdk+jmods`, `jdk+jcef`, `jre+jcef`, `jdk+ft`, or `jre+ft`). Supported values vary by distribution.' - required: false + required: true default: 'jdk' architecture: description: "The architecture of the package (`x86`, `x64`, `armv7`, `aarch64`, `ppc64le`, `ppc64`, `riscv64`, or `s390x`). Aliases `ia32`, `amd64`, `arm`, and `arm64` are normalized to `x86`, `x64`, `armv7`, and `aarch64`. Supported values vary by distribution and operating system. Defaults to the action runner's architecture." @@ -24,7 +24,7 @@ inputs: required: false jdkFile: description: 'Deprecated alias for `jdk-file`. Path to where the compressed JDK is located. Use `jdk-file` instead; this alias may be removed in a future release.' - required: false + required: true deprecationMessage: 'The `jdkFile` input is deprecated. Use `jdk-file` instead.' check-latest: description: 'Set this option if you want the action to check for the latest available version that satisfies the version spec'