#32
100%

Ran 07 Aug 2026 02:46PM UTC

Jobs 1

Files 11

Run time 1min

Badge

Embed ▾

Committed 07 Aug 2026 11:43AM UTC coverage: 100.0%. Remained the same

Build # #32

Build Type

push

travis-ci

Committed by

Tatsh

Commit Message

workflows/*: pin actions to commit SHAs and fix zizmor findings

Every uses: reference is now pinned to a full 40-character commit SHA
rather than a mutable tag, so a force-pushed or repointed tag upstream
cannot silently change what runs with GITHUB_TOKEN. Three of the tags
were annotated, so the peeled commit was used rather than the tag
object, which uses: cannot resolve.

Also resolves the remaining zizmor findings in these files:

- artipacked: set persist-credentials: false on every checkout so the
  token is not written into .git/config where a later archiving step
  could capture it.
- template-injection: pass github.ref_name through an env variable
  instead of expanding it directly into a run block.
- github-env: publish the release tag via GITHUB_OUTPUT rather than
  GITHUB_ENV, limiting it to the step that consumes it.
- superfluous-actions: replace softprops/action-gh-release with a gh
  release script step, removing a third-party action from the release
  path.

zizmor reports no findings, with the ignored and suppressed counts
unchanged from before, so nothing was silenced to reach that state.

Signed-off-by: Andrew Udvare <audvare@gmail.com>

Coverage Stats

477 of 477 relevant lines covered (100.0%)

26560.36 hits per line

Jobs

ID	Job ID	Ran	Files	Coverage
1	#32.1	07 Aug 2026 02:46PM UTC	11	100.0

Tatsh / tetris-efi / #32
100%

README BADGES
x

Markdown

Textile

RDoc

HTML

Rst

Jobs

Source Files on build #32

Tatsh / tetris-efi / #32 100%

README BADGES x

Markdown

Textile

RDoc

HTML

Rst

Jobs

Source Files on build #32

Tatsh / tetris-efi / #32
100%

README BADGES
x