Skip to content

ci, action: address zizmor findings, bump versions #455

ci, action: address zizmor findings, bump versions

ci, action: address zizmor findings, bump versions #455

Triggered via pull request October 14, 2025 20:56
Status Success
Total duration 55s
Artifacts 1

selftest.yml

on: pull_request
Matrix: selftest-whitespace
Matrix: selftest-xfail-invalid-inputs
Matrix: selftest-xfail-verify-missing-options
Matrix: selftest
selftest-staging
19s
selftest-staging
selftest-glob
19s
selftest-glob
selftest-glob-multiple
20s
selftest-glob-multiple
selftest-upload-artifacts
25s
selftest-upload-artifacts
selftest-verify
20s
selftest-verify
selftest-identity-token
20s
selftest-identity-token
selftest-xfail-glob-input-expansion
17s
selftest-xfail-glob-input-expansion
Matrix: selftest-runner-python
all-selftests-pass
2s
all-selftests-pass
Fit to window
Zoom out
Zoom in

Annotations

16 errors
selftest-xfail-verify-missing-options (true, https://github.com/sigstore/gh-action-sigstore-pytho...
❌ verify-oidc-issuer must be specified when verify is enabled
selftest-xfail-invalid-inputs (/tmp/extremely-nonexistent-file)
Process completed with exit code 1.
selftest-xfail-invalid-inputs (/tmp/extremely-nonexistent-file)
❌ input /tmp/extremely-nonexistent-file doesn't expand to one or more filenames
selftest-xfail-verify-missing-options (true)
Process completed with exit code 1.
selftest-xfail-verify-missing-options (true)
❌ verify-cert-identity must be specified when verify is enabled
selftest-xfail-verify-missing-options (false, https://github.com/sigstore/gh-action-sigstore-pyth...
❌ verify-cert-identity cannot be specified without verify: true
selftest-xfail-verify-missing-options (true, https://token.actions.githubusercontent.com)
❌ verify-cert-identity must be specified when verify is enabled
selftest-xfail-glob-input-expansion
Process completed with exit code 1.
selftest-xfail-glob-input-expansion
❌ input ./${TEST_DIR}/*.txt doesn't expand to one or more filenames
selftest-xfail-verify-missing-options (false, https://token.actions.githubusercontent.com)
❌ verify-oidc-issuer cannot be specified without verify: true
selftest-xfail-invalid-inputs (--this-should-not-work)
Process completed with exit code 1.
selftest-xfail-invalid-inputs (--this-should-not-work)
❌ input --this-should-not-work looks like a flag

Artifacts

Produced during runtime
Name Size Digest
signing-artifacts-selftest-upload-artifacts
5.7 KB
sha256:e501df71d4c576c37aff854a1395b4749497e2d0baae7b3d9da7e8ebe35faae6