Skip to content

Add zizmorify configuration #8

Add zizmorify configuration

Add zizmorify configuration #8

Triggered via pull request June 20, 2026 09:23
Status Failure
Total duration 10h 50m 4s
Artifacts –

zizmor.yml

on: pull_request
Run zizmor 🌈
11s
Run zizmor 🌈
Fit to window
Zoom out
Zoom in

Annotations

2 errors and 10 warnings
Run zizmor 🌈
Process completed with exit code 14.
dangerous-triggers: .github/workflows/rector-cs.yml#L3
rector-cs.yml:3: use of fundamentally insecure workflow trigger: pull_request_target is almost always used insecurely
excessive-permissions: .github/workflows/static.yml#L1
static.yml:1: overly broad permissions: default permissions used due to no permissions: block
excessive-permissions: .github/workflows/mutation.yml#L24
mutation.yml:24: overly broad permissions: default permissions used due to no permissions: block
excessive-permissions: .github/workflows/mutation.yml#L1
mutation.yml:1: overly broad permissions: default permissions used due to no permissions: block
excessive-permissions: .github/workflows/composer-require-checker.yml#L28
composer-require-checker.yml:28: overly broad permissions: default permissions used due to no permissions: block
excessive-permissions: .github/workflows/composer-require-checker.yml#L1
composer-require-checker.yml:1: overly broad permissions: default permissions used due to no permissions: block
excessive-permissions: .github/workflows/build.yml#L26
build.yml:26: overly broad permissions: default permissions used due to no permissions: block
excessive-permissions: .github/workflows/build.yml#L1
build.yml:1: overly broad permissions: default permissions used due to no permissions: block
excessive-permissions: .github/workflows/bc.yml#L27
bc.yml:27: overly broad permissions: default permissions used due to no permissions: block
excessive-permissions: .github/workflows/bc.yml#L1
bc.yml:1: overly broad permissions: default permissions used due to no permissions: block
dependabot-cooldown: .github/dependabot.yml#L4
dependabot.yml:4: insufficient cooldown in Dependabot updates: missing cooldown configuration