Skip to content

fix(ci): harden some workflows in packages#12178

Open
jtmcdole wants to merge 2 commits into
flutter:mainfrom
jtmcdole:zizmor
Open

fix(ci): harden some workflows in packages#12178
jtmcdole wants to merge 2 commits into
flutter:mainfrom
jtmcdole:zizmor

Conversation

@jtmcdole

@jtmcdole jtmcdole commented Jul 10, 2026

Copy link
Copy Markdown
Member

fixes flutter/flutter#189098

~/.local/bin/zizmor --gh-token=$(gh auth token)  .github/workflow
 INFO zizmor: 🌈 zizmor v1.25.2
 INFO audit: zizmor: 🌈 completed .github/workflows/batch_release_pr.yml
 INFO audit: zizmor: 🌈 completed .github/workflows/go_router_batch.yml
 INFO audit: zizmor: 🌈 completed .github/workflows/internals/install_flutter/action.yml
 INFO audit: zizmor: 🌈 completed .github/workflows/pull_request_label.yml
 INFO audit: zizmor: 🌈 completed .github/workflows/release.yml
 INFO audit: zizmor: 🌈 completed .github/workflows/release_from_branches.yml
 INFO audit: zizmor: 🌈 completed .github/workflows/remove_cicd.yml
 INFO audit: zizmor: 🌈 completed .github/workflows/reusable_release.yml
 INFO audit: zizmor: 🌈 completed .github/workflows/sync_release_pr.yml
No findings to report. Good job! (2 ignored, 56 suppressed)

jtmcdole added 2 commits July 10, 2026 15:00
fixes #189098

```
~/.local/bin/zizmor --gh-token=$(gh auth token)  .github/workflow
 INFO zizmor: 🌈 zizmor v1.25.2
 INFO audit: zizmor: 🌈 completed .github/workflows/batch_release_pr.yml
 INFO audit: zizmor: 🌈 completed .github/workflows/go_router_batch.yml
 INFO audit: zizmor: 🌈 completed .github/workflows/internals/install_flutter/action.yml
 INFO audit: zizmor: 🌈 completed .github/workflows/pull_request_label.yml
 INFO audit: zizmor: 🌈 completed .github/workflows/release.yml
 INFO audit: zizmor: 🌈 completed .github/workflows/release_from_branches.yml
 INFO audit: zizmor: 🌈 completed .github/workflows/remove_cicd.yml
 INFO audit: zizmor: 🌈 completed .github/workflows/reusable_release.yml
 INFO audit: zizmor: 🌈 completed .github/workflows/sync_release_pr.yml
No findings to report. Good job! (2 ignored, 56 suppressed)
```
@jtmcdole jtmcdole added the CICD Run CI/CD label Jul 10, 2026
@jtmcdole jtmcdole marked this pull request as ready for review July 10, 2026 22:19
@jtmcdole jtmcdole requested a review from stuartmorgan-g July 10, 2026 22:19
@gemini-code-assist

Copy link
Copy Markdown
Contributor

Note

Gemini is unable to generate a review for this pull request due to the file types involved not being currently supported.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

CICD Run CI/CD

Projects

None yet

Development

Successfully merging this pull request may close these issues.

ci: harden packages workflow actions with zizmor

1 participant