zizmor: 1.22.0 -> 1.23.1 (#503283)

This commit is contained in:
Thomas Gerbet
2026-03-26 08:46:37 +00:00
committed by GitHub
+14 -3
View File
@@ -11,16 +11,16 @@
rustPlatform.buildRustPackage (finalAttrs: {
pname = "zizmor";
version = "1.22.0";
version = "1.23.1";
src = fetchFromGitHub {
owner = "zizmorcore";
repo = "zizmor";
tag = "v${finalAttrs.version}";
hash = "sha256-HRwtjke7kDq+mrTLwyWU0aEGxdgdbimcg42J1baDXhs=";
hash = "sha256-fNpIcOVPw0beoN10JM92ITOxCupUZj8xV+P4VXIilRo=";
};
cargoHash = "sha256-UuSBd+RppydP0+cG1iNarikbhBtoZZbIUxiwgq3EZaU=";
cargoHash = "sha256-K0lL46Mbx3Bqbhxqz21s0xsz7W9GKeG3Qw72fek0c/M=";
buildInputs = [
rust-jemalloc-sys
@@ -30,6 +30,17 @@ rustPlatform.buildRustPackage (finalAttrs: {
installShellFiles
];
checkFlags = [
# need network
"--skip=audit::known_vulnerable_actions::tests::test_first_patched_version_priority"
"--skip=audit::known_vulnerable_actions::tests::test_fix_symbolic_ref"
"--skip=audit::known_vulnerable_actions::tests::test_fix_upgrade_action_with_subpath"
"--skip=audit::known_vulnerable_actions::tests::test_fix_upgrade_actions_checkout"
"--skip=audit::known_vulnerable_actions::tests::test_fix_upgrade_actions_setup_node"
"--skip=audit::known_vulnerable_actions::tests::test_fix_upgrade_multiple_vulnerable_actions"
"--skip=audit::known_vulnerable_actions::tests::test_fix_upgrade_third_party_action"
];
postInstall = lib.optionalString (stdenv.buildPlatform.canExecute stdenv.hostPlatform) ''
installShellCompletion --cmd zizmor \
--bash <("$out/bin/zizmor" --completions bash) \