Skip to content

Commit

Permalink
Remove Octoscan, Zizmor, and Poutine.
Browse files Browse the repository at this point in the history
  • Loading branch information
johnbillion committed Jan 21, 2025
1 parent 36d4ab5 commit 0ee00f9
Showing 1 changed file with 0 additions and 75 deletions.
75 changes: 0 additions & 75 deletions .github/workflows/reusable-workflow-lint.yml
Original file line number Diff line number Diff line change
Expand Up @@ -22,78 +22,3 @@ jobs:
uses: docker://rhysd/actionlint:1.7.7
with:
args: "-color -verbose"

octoscan:
name: Octoscan
runs-on: ubuntu-latest
permissions:
security-events: write
actions: read
contents: read
timeout-minutes: 10
steps:
- name: Checkout code
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
with:
persist-credentials: false

- name: Run octoscan
id: octoscan
uses: synacktiv/action-octoscan@6b1cf2343893dfb9e5f75652388bd2dc83f456b0 # v1.0.0
with:
filter_triggers: ''

- name: Upload SARIF file
uses: github/codeql-action/upload-sarif@b6a472f63d85b9c78a3ac5e89422239fc15e9b3c # v3.28.1
with:
sarif_file: ${{steps.octoscan.outputs.sarif_output}}
category: octoscan

zizmor:
name: Zizmor
runs-on: ubuntu-latest
permissions:
security-events: write
actions: read
contents: read
steps:
- name: Checkout repository
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
with:
persist-credentials: false

- name: Install the latest version of uv
uses: astral-sh/setup-uv@b5f58b2abc5763ade55e4e9d0fe52cd1ff7979ca # v5.2.1

# https://github.com/woodruffw/zizmor
- name: Run zizmor
run: uvx [email protected] --format sarif . > results.sarif
env:
GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}

- name: Upload SARIF file
uses: github/codeql-action/upload-sarif@b6a472f63d85b9c78a3ac5e89422239fc15e9b3c # v3.28.1
with:
sarif_file: results.sarif
category: zizmor

poutine:
name: Poutine
runs-on: ubuntu-latest
permissions:
security-events: write
contents: read
steps:
- name: Checkout repository
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
with:
persist-credentials: false

- name: Run Poutine
uses: boostsecurityio/poutine-action@84c0a0d32e8d57ae12651222be1eb15351429228 # v0.15.2

- name: Upload SARIF file
uses: github/codeql-action/upload-sarif@b6a472f63d85b9c78a3ac5e89422239fc15e9b3c # v3.28.1
with:
sarif_file: results.sarif
category: poutine

0 comments on commit 0ee00f9

Please sign in to comment.