27394232283
100%

Ran 12 Jun 2026 04:20AM UTC

Jobs 1

Files 2

Run time 1min

Badge

Embed ▾

Committed 12 Jun 2026 04:19AM UTC coverage: 100.0%. Remained the same

Build # 27394232283

Build Type

push

github

Committed by

Tatsh

Commit Message

workflows/*: pin actions and harden hand-maintained workflows for zizmor

These workflows are not generated by Wiswa (want_codeql, want_tests,
and the cmake, flatpak, snap, pages, and release workflows are all
hand-maintained), so they missed the SHA pinning Wiswa applies to its
generated workflows. Bring them up to the same standard so zizmor
passes:

- Pin every action reference to a commit SHA.
- Set persist-credentials: false on every checkout.
- codeql: switch the language matrix from the legacy cpp to c-cpp plus
  actions, drive the build with build-mode (autobuild for c-cpp, none
  for actions), and drop the standalone autobuild step.
- release: write the resolved tag to the step output instead of
  GITHUB_ENV and read it back through env in the publish step,
  resolving the github-env finding.
- snap: replace softprops/action-gh-release with a gh release script
  step.
- flatpak: keep softprops (pinned) because the job runs inside the
  flathub container, which does not provide the gh CLI; suppress the
  info-level superfluous-actions finding for flatpak.yml in
  .github/zizmor.yml.

Signed-off-by: Andrew Udvare <audvare@gmail.com>

Coverage Stats

129 of 129 relevant lines covered (100.0%)

7281.89 hits per line

Jobs

ID	Job ID	Ran	Files	Coverage
1	27394232283.1	12 Jun 2026 04:20AM UTC	2	100.0	GitHub Action Run

Tatsh / bfcodec / 27394232283
100%

README BADGES
x

Markdown

Textile

RDoc

HTML

Rst

Jobs

Source Files on build 27394232283

Tatsh / bfcodec / 27394232283 100%

README BADGES x

Markdown

Textile

RDoc

HTML

Rst

Jobs

Source Files on build 27394232283

Tatsh / bfcodec / 27394232283
100%

README BADGES
x