Skip to content

fix(ci): harden some workflows in core-packages#32

Merged
jtmcdole merged 2 commits into
mainfrom
zizmor
Jul 16, 2026
Merged

fix(ci): harden some workflows in core-packages#32
jtmcdole merged 2 commits into
mainfrom
zizmor

Conversation

@jtmcdole

Copy link
Copy Markdown
Member

fixes: flutter/flutter#189297

Largely --fix with some GH_TOKEN changes.

~/.local/bin/zizmor --gh-token=$(gh auth token)  .github/workflows
~/.local/bin/zizmor --gh-token=$(gh auth token)  .github/actions

~/.local/bin/zizmor --gh-token=$(gh auth token)  .github/workflows
~/.local/bin/zizmor --gh-token=$(gh auth token)  .github/actions
@jtmcdole jtmcdole requested a review from stuartmorgan-g July 15, 2026 16:38

@gemini-code-assist gemini-code-assist Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Code Review

This pull request updates the .github/actions/set-up-repo/action.yaml workflow file to pin the dart-lang/setup-dart action to a specific commit SHA. There are no review comments, and I have no feedback to provide.

Comment thread .github/workflows/multi_version_tasks.yaml Outdated
Comment thread .github/workflows/release.yml
@jtmcdole jtmcdole requested a review from stuartmorgan-g July 15, 2026 22:51

@stuartmorgan-g stuartmorgan-g left a comment

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

Comment thread .github/workflows/release.yml
@jtmcdole jtmcdole merged commit 944a7e6 into main Jul 16, 2026
13 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

ci: harden core-packages workflow actions with zizmor

2 participants