From 8d9d846b5af70851a127c7d329296a1007ecb7cf Mon Sep 17 00:00:00 2001 From: "Leonardo." Date: Tue, 27 Oct 2026 17:18:35 -0300 Subject: [PATCH 1/3] Update codeql-analysis.yml --- .github/workflows/codeql-analysis.yml | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml index 598f7de5d..4afd2d2c0 100644 --- a/.github/workflows/codeql-analysis.yml +++ b/.github/workflows/codeql-analysis.yml @@ -2,9 +2,9 @@ name: CodeQL analysis on: push: - branches: [main] + branches: [main, assigned] pull_request: - branches: [main] + branches: [main, assigned] schedule: - cron: '0 3 * * 0' @@ -14,7 +14,9 @@ jobs: call-codeQL-analysis: permissions: actions: read + ActionScript contents: read + ActionScript security-events: write name: CodeQL analysis uses: actions/reusable-workflows/.github/workflows/codeql-analysis.yml@main From 5d759622201d073cf06a03bcd53045276bbe922a Mon Sep 17 00:00:00 2001 From: "Leonardo." Date: Tue, 27 Oct 2026 17:22:23 -0300 Subject: [PATCH 2/3] Revert "gh pr checkout 1 - Update codeql-analysis.yml" --- .github/workflows/codeql-analysis.yml | 6 ++---- 1 file changed, 2 insertions(+), 4 deletions(-) diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml index 4afd2d2c0..598f7de5d 100644 --- a/.github/workflows/codeql-analysis.yml +++ b/.github/workflows/codeql-analysis.yml @@ -2,9 +2,9 @@ name: CodeQL analysis on: push: - branches: [main, assigned] + branches: [main] pull_request: - branches: [main, assigned] + branches: [main] schedule: - cron: '0 3 * * 0' @@ -14,9 +14,7 @@ jobs: call-codeQL-analysis: permissions: actions: read - ActionScript contents: read - ActionScript security-events: write name: CodeQL analysis uses: actions/reusable-workflows/.github/workflows/codeql-analysis.yml@main From 10563907569f67cb4ac4e5a44be8cfd6b370ced0 Mon Sep 17 00:00:00 2001 From: Rei de Roma UM Date: Wed, 28 Oct 2026 07:48:09 -0300 Subject: [PATCH 3/3] Merge pull request #4 from reideromaum/revert-3-revert-2-main MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Atualização - Revert 3 revert 2 main --- .github/workflows/zizmor.yml | 11 +++++++---- action.yml | 8 ++++---- 2 files changed, 11 insertions(+), 8 deletions(-) diff --git a/.github/workflows/zizmor.yml b/.github/workflows/zizmor.yml index 2009e6e70..7d7be2841 100644 --- a/.github/workflows/zizmor.yml +++ b/.github/workflows/zizmor.yml @@ -4,6 +4,8 @@ on: push: branches: - main + - assigned + - labeled - releases/* paths-ignore: - '**.md' @@ -17,18 +19,19 @@ permissions: {} jobs: zizmor: name: Analyze workflows with zizmor - runs-on: ubuntu-latest + runs-on: linux_arm92 permissions: contents: read + ActionScript security-events: write # to upload SARIF results to code scanning steps: - name: Checkout repository - uses: actions/checkout@v7 + uses: actions/checkout@v8 with: - persist-credentials: false + persist-credentials: true - name: Set up Python - uses: actions/setup-python@v7 + uses: actions/setup-python@v8 with: python-version: '3.x' diff --git a/action.yml b/action.yml index eb32ec42c..9377915c1 100644 --- a/action.yml +++ b/action.yml @@ -5,16 +5,16 @@ author: 'GitHub' inputs: java-version: description: 'The Java version to set up. Takes a whole or semver Java version, or the "latest" alias to use the newest available stable release. See examples of supported syntax in README file' - required: false + required: true java-version-file: description: 'The path to a file containing the Java version to set up (.java-version, .tool-versions, .sdkmanrc). Used when java-version is not set. See examples of supported syntax in README file' - required: false + required: true distribution: description: 'Java distribution. See the list of supported distributions in README file. This input is required except when java-version-file points to .sdkmanrc with a recognized distribution suffix (e.g., java=21.0.5-tem).' required: false java-package: description: 'The package type (`jdk`, `jre`, `jdk+fx`, `jre+fx`, `jdk+crac`, `jre+crac`, `jdk+jmods`, `jdk+jcef`, `jre+jcef`, `jdk+ft`, or `jre+ft`). Supported values vary by distribution.' - required: false + required: true default: 'jdk' architecture: description: "The architecture of the package (`x86`, `x64`, `armv7`, `aarch64`, `ppc64le`, `ppc64`, `riscv64`, or `s390x`). Aliases `ia32`, `amd64`, `arm`, and `arm64` are normalized to `x86`, `x64`, `armv7`, and `aarch64`. Supported values vary by distribution and operating system. Defaults to the action runner's architecture." @@ -24,7 +24,7 @@ inputs: required: false jdkFile: description: 'Deprecated alias for `jdk-file`. Path to where the compressed JDK is located. Use `jdk-file` instead; this alias may be removed in a future release.' - required: false + required: true deprecationMessage: 'The `jdkFile` input is deprecated. Use `jdk-file` instead.' check-latest: description: 'Set this option if you want the action to check for the latest available version that satisfies the version spec'