Repository navigation
fix zizmor checks #963
Description
zizmor 1.23.0 added a check for secrets outside envs: https://docs.zizmor.sh/audits/#secrets-outside-env
We need to determine if possible to set environment secrets or add an ignore if this is not possible.
Reference run: https://github.com/canonical/testflinger/actions/runs/22961442709/job/66652916870?pr=962
Activity
syncronize-issues-to-jira commentedon Mar 11, 2026
Thank you for reporting your feedback to us!
The internal ticket has been created: https://warthogs.atlassian.net/browse/CERTTF-857.
rene-oromtz commentedon Apr 8, 2026
As per https://docs.zizmor.sh/audits/#secrets-outside-env seems that once zizmor 1.24 is released, only
auditorpersona will get this type of warnings.Since we are using
pedanticpersona, the workflow failure will fix by itself. We may still need to evaluate if we should implement this as best practice.