Skip to content

chore(deps): bump the github-actions-dependencies group across 5 directories with 18 updates - #935

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/github-actions-dependencies-fcc0a899b4
Open

chore(deps): bump the github-actions-dependencies group across 5 directories with 18 updates#935
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/github-actions-dependencies-fcc0a899b4

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 23, 2026

Copy link
Copy Markdown
Contributor

Bumps the github-actions-dependencies group with 12 updates in the / directory:

Package From To
hoverkraft-tech/ci-github-common/.github/workflows/greetings.yml 0.38.0 0.39.0
hoverkraft-tech/ci-github-publish/.github/workflows/release-actions.yml 0.28.0 0.29.0
hoverkraft-tech/ci-github-common/.github/workflows/need-fix-to-issue.yml 0.38.0 0.39.0
actions/create-github-app-token 3.2.0 3.3.0
hoverkraft-tech/ci-github-common/.github/workflows/semantic-pull-request.yml 0.38.0 0.39.0
hoverkraft-tech/ci-github-common/.github/workflows/linter.yml 0.38.0 0.39.0
hoverkraft-tech/ci-github-common/.github/workflows/stale.yml 0.38.0 0.39.0
hoverkraft-tech/ci-github-common/actions/checkout 0.38.0 0.39.0
hoverkraft-tech/ci-github-common/actions/local-workflow-actions 0.38.0 0.39.0
hoverkraft-tech/ci-github-common/actions/set-matrix-output 0.38.0 0.39.0
hoverkraft-tech/ci-github-common/actions/get-matrix-outputs 0.38.0 0.39.0
hoverkraft-tech/ci-github-common/actions/repository-owner-is-organization 0.38.0 0.39.0
hoverkraft-tech/ci-github-common/actions/checkout 0.38.0 0.39.0
actions/create-github-app-token 3.2.0 3.3.0
hoverkraft-tech/ci-github-common/actions/checkout 0.38.0 0.39.0

Bumps the github-actions-dependencies group with 3 updates in the /actions/docker/build-image directory: hoverkraft-tech/ci-github-common/actions/local-actions, hoverkraft-tech/ci-github-common/actions/slugify and int128/docker-build-cache-config-action.
Bumps the github-actions-dependencies group with 4 updates in the /actions/helm/generate-docs directory: actions/create-github-app-token, hoverkraft-tech/ci-github-common/actions/checkout, hoverkraft-tech/ci-github-nodejs/actions/setup-node and hoverkraft-tech/ci-github-common/actions/create-and-merge-pull-request.
Bumps the github-actions-dependencies group with 3 updates in the /actions/helm/release-chart directory: hoverkraft-tech/ci-github-common/actions/checkout, hoverkraft-tech/ci-github-common/actions/local-actions and hoverkraft-tech/ci-github-nodejs/actions/setup-node.
Bumps the github-actions-dependencies group with 1 update in the /actions/helm/update-chart-values directory: mikefarah/yq.

Updates hoverkraft-tech/ci-github-common/.github/workflows/greetings.yml from 0.38.0 to 0.39.0

Release notes

Sourced from hoverkraft-tech/ci-github-common/.github/workflows/greetings.yml's releases.

0.39.0

Release Summary

Linting now shares Super-Linter defaults across local and CI runs for consistent configuration. Super-Linter summaries are enabled by default, with fallback Conventional Commits rules when commitlint is enabled without a project configuration.

Internal updates refresh documentation, GitHub Actions dependencies, and fast-xml-parser.

Breaking changes

The actions/local-actions and actions/local-workflow-actions helpers have been removed; migrate to direct $/ action references and remove dependencies on the helpers’ exposed paths or outputs. These references require GitHub.com and GitHub Actions runner 2.336.0 or newer.

What's Changed

Full Changelog: hoverkraft-tech/ci-github-common@0.38.0...0.39.0

Commits
  • ab69f41 docs: update actions and workflows documentation
  • a3ee349 fix(ci): pin shared super-linter image by digest
  • 467cdd3 feat: share linting defaults and remove local action helpers
  • 46b37cf chore: bump the github-actions-dependencies group across 2 directories with 2...
  • d6339c7 chore: bump the github-actions-dependencies group across 1 directory with 4 u...
  • 7c8a12e chore: bump fast-xml-parser
  • d470912 chore: bump the github-actions-dependencies group across 1 directory with 3 u...
  • 546a624 chore: bump the github-actions-dependencies group across 1 directory with 2 u...
  • b6dd60c chore: bump fast-xml-parser
  • efc2024 feat(linter): align Super-Linter defaults with workflow behavior
  • Additional commits viewable in compare view

Updates hoverkraft-tech/ci-github-publish/.github/workflows/release-actions.yml from 0.28.0 to 0.29.0

Release notes

Sourced from hoverkraft-tech/ci-github-publish/.github/workflows/release-actions.yml's releases.

0.29.0

Release Summary

Release planning now detects changes.

Internal updates include GitHub Actions and npm dependency upgrades, alongside refreshed action and workflow documentation.

Breaking changes

No breaking changes.

What's Changed

Full Changelog: hoverkraft-tech/ci-github-publish@0.28.0...0.29.0

Commits
  • a0a9d18 build(deps): Bump the npm-dependencies group across 1 directory with 2 updates
  • 62fabb0 docs: update actions and workflows documentation
  • 1b6df6b feat(release): detect changes during release planning
  • 40d9c06 Merge pull request #464 from hoverkraft-tech/dependabot/npm_and_yarn/actions/...
  • 51f0f6b build(deps): Bump the npm-dependencies group across 1 directory with 2 updates
  • 9237f28 build(deps): Bump the npm-dependencies group across 1 directory with 4 updates
  • 736fe8d build(deps): Bump WyriHaximus/github-action-get-previous-tag
  • eb701b3 build(deps): Bump the npm-dependencies group across 1 directory with 2 updates
  • efe06e7 build(deps): Bump actions/deploy-pages
  • 4469fb0 docs: update actions and workflows documentation
  • Additional commits viewable in compare view

Updates hoverkraft-tech/ci-github-common/.github/workflows/need-fix-to-issue.yml from 0.38.0 to 0.39.0

Release notes

Sourced from hoverkraft-tech/ci-github-common/.github/workflows/need-fix-to-issue.yml's releases.

0.39.0

Release Summary

Linting now shares Super-Linter defaults across local and CI runs for consistent configuration. Super-Linter summaries are enabled by default, with fallback Conventional Commits rules when commitlint is enabled without a project configuration.

Internal updates refresh documentation, GitHub Actions dependencies, and fast-xml-parser.

Breaking changes

The actions/local-actions and actions/local-workflow-actions helpers have been removed; migrate to direct $/ action references and remove dependencies on the helpers’ exposed paths or outputs. These references require GitHub.com and GitHub Actions runner 2.336.0 or newer.

What's Changed

Full Changelog: hoverkraft-tech/ci-github-common@0.38.0...0.39.0

Commits
  • ab69f41 docs: update actions and workflows documentation
  • a3ee349 fix(ci): pin shared super-linter image by digest
  • 467cdd3 feat: share linting defaults and remove local action helpers
  • 46b37cf chore: bump the github-actions-dependencies group across 2 directories with 2...
  • d6339c7 chore: bump the github-actions-dependencies group across 1 directory with 4 u...
  • 7c8a12e chore: bump fast-xml-parser
  • d470912 chore: bump the github-actions-dependencies group across 1 directory with 3 u...
  • 546a624 chore: bump the github-actions-dependencies group across 1 directory with 2 u...
  • b6dd60c chore: bump fast-xml-parser
  • efc2024 feat(linter): align Super-Linter defaults with workflow behavior
  • Additional commits viewable in compare view

Updates actions/create-github-app-token from 3.2.0 to 3.3.0

Release notes

Sourced from actions/create-github-app-token's releases.

v3.3.0

3.3.0 (2026-10-12)

Features

Bug Fixes

  • deps: bump nested undici from 6.24.0 to 6.29.0 (#403) (12461a3)
  • deps: bump the production-dependencies group across 1 directory with 3 updates (#395) (a69c19d)
Changelog

Sourced from actions/create-github-app-token's changelog.

Changelog

3.3.0 (2026-10-12)

Features

Bug Fixes

  • deps: bump nested undici from 6.24.0 to 6.29.0 (#403) (12461a3)
  • deps: bump the production-dependencies group across 1 directory with 3 updates (#395) (a69c19d)

3.2.0 (2026-05-12)

Features

  • add support for enterprise-level GitHub Apps (#263) (952a2a7)
  • support full repository names in repositories input (#372) (85eb8dd)

Bug Fixes

  • deps: bump @​actions/core from 3.0.0 to 3.0.1 in the production-dependencies group (#364) (43e5c34)
  • validate private-key input (#376) (f24bbd8)
Commits
  • 64ab729 chore(main): release 3.3.0 (#402)
  • f3a828e ci: create signed dist commits in release workflow (#404)
  • 655017f docs: clarify when owner grants access to all repositories (#378)
  • 12461a3 fix(deps): bump nested undici from 6.24.0 to 6.29.0 (#403)
  • a47236f feat: update permission inputs (#399)
  • a69c19d fix(deps): bump the production-dependencies group across 1 directory with 3 u...
  • d5cb7ae build(deps): bump actions/checkout from 6 to 7 (#384)
  • 575da86 build(deps): bump stefanzweifel/git-auto-commit-action from 7.1.0 to 7.2.0 in...
  • e85f677 test: omit stack traces from snapshots (#401)
  • 9419396 build(deps-dev): bump c8 from 11.0.0 to 12.0.0 (#400)
  • Additional commits viewable in compare view

Updates hoverkraft-tech/ci-github-common/.github/workflows/semantic-pull-request.yml from 0.38.0 to 0.39.0

Release notes

Sourced from hoverkraft-tech/ci-github-common/.github/workflows/semantic-pull-request.yml's releases.

0.39.0

Release Summary

Linting now shares Super-Linter defaults across local and CI runs for consistent configuration. Super-Linter summaries are enabled by default, with fallback Conventional Commits rules when commitlint is enabled without a project configuration.

Internal updates refresh documentation, GitHub Actions dependencies, and fast-xml-parser.

Breaking changes

The actions/local-actions and actions/local-workflow-actions helpers have been removed; migrate to direct $/ action references and remove dependencies on the helpers’ exposed paths or outputs. These references require GitHub.com and GitHub Actions runner 2.336.0 or newer.

What's Changed

Full Changelog: hoverkraft-tech/ci-github-common@0.38.0...0.39.0

Commits
  • ab69f41 docs: update actions and workflows documentation
  • a3ee349 fix(ci): pin shared super-linter image by digest
  • 467cdd3 feat: share linting defaults and remove local action helpers
  • 46b37cf chore: bump the github-actions-dependencies group across 2 directories with 2...
  • d6339c7 chore: bump the github-actions-dependencies group across 1 directory with 4 u...
  • 7c8a12e chore: bump fast-xml-parser
  • d470912 chore: bump the github-actions-dependencies group across 1 directory with 3 u...
  • 546a624 chore: bump the github-actions-dependencies group across 1 directory with 2 u...
  • b6dd60c chore: bump fast-xml-parser
  • efc2024 feat(linter): align Super-Linter defaults with workflow behavior
  • Additional commits viewable in compare view

Updates hoverkraft-tech/ci-github-common/.github/workflows/linter.yml from 0.38.0 to 0.39.0

Release notes

Sourced from hoverkraft-tech/ci-github-common/.github/workflows/linter.yml's releases.

0.39.0

Release Summary

Linting now shares Super-Linter defaults across local and CI runs for consistent configuration. Super-Linter summaries are enabled by default, with fallback Conventional Commits rules when commitlint is enabled without a project configuration.

Internal updates refresh documentation, GitHub Actions dependencies, and fast-xml-parser.

Breaking changes

The actions/local-actions and actions/local-workflow-actions helpers have been removed; migrate to direct $/ action references and remove dependencies on the helpers’ exposed paths or outputs. These references require GitHub.com and GitHub Actions runner 2.336.0 or newer.

What's Changed

Full Changelog: hoverkraft-tech/ci-github-common@0.38.0...0.39.0

Commits
  • ab69f41 docs: update actions and workflows documentation
  • a3ee349 fix(ci): pin shared super-linter image by digest
  • 467cdd3 feat: share linting defaults and remove local action helpers
  • 46b37cf chore: bump the github-actions-dependencies group across 2 directories with 2...
  • d6339c7 chore: bump the github-actions-dependencies group across 1 directory with 4 u...
  • 7c8a12e chore: bump fast-xml-parser
  • d470912 chore: bump the github-actions-dependencies group across 1 directory with 3 u...
  • 546a624 chore: bump the github-actions-dependencies group across 1 directory with 2 u...
  • b6dd60c chore: bump fast-xml-parser
  • efc2024 feat(linter): align Super-Linter defaults with workflow behavior
  • Additional commits viewable in compare view

Updates hoverkraft-tech/ci-github-common/.github/workflows/stale.yml from 0.38.0 to 0.39.0

Release notes

Sourced from hoverkraft-tech/ci-github-common/.github/workflows/stale.yml's releases.

0.39.0

Release Summary

Linting now shares Super-Linter defaults across local and CI runs for consistent configuration. Super-Linter summaries are enabled by default, with fallback Conventional Commits rules when commitlint is enabled without a project configuration.

Internal updates refresh documentation, GitHub Actions dependencies, and fast-xml-parser.

Breaking changes

The actions/local-actions and actions/local-workflow-actions helpers have been removed; migrate to direct $/ action references and remove dependencies on the helpers’ exposed paths or outputs. These references require GitHub.com and GitHub Actions runner 2.336.0 or newer.

What's Changed

Full Changelog: hoverkraft-tech/ci-github-common@0.38.0...0.39.0

Commits
  • ab69f41 docs: update actions and workflows documentation
  • a3ee349 fix(ci): pin shared super-linter image by digest
  • 467cdd3 feat: share linting defaults and remove local action helpers
  • 46b37cf chore: bump the github-actions-dependencies group across 2 directories with 2...
  • d6339c7 chore: bump the github-actions-dependencies group across 1 directory with 4 u...
  • 7c8a12e chore: bump fast-xml-parser
  • d470912 chore: bump the github-actions-dependencies group across 1 directory with 3 u...
  • 546a624 chore: bump the github-actions-dependencies group across 1 directory with 2 u...
  • b6dd60c chore: bump fast-xml-parser
  • efc2024 feat(linter): align Super-Linter defaults with workflow behavior
  • Additional commits viewable in compare view

Updates hoverkraft-tech/ci-github-common/actions/checkout from 0.38.0 to 0.39.0

Release notes

Sourced from hoverkraft-tech/ci-github-common/actions/checkout's releases.

0.39.0

Release Summary

Linting now shares Super-Linter defaults across local and CI runs for consistent configuration. Super-Linter summaries are enabled by default, with fallback Conventional Commits rules when commitlint is enabled without a project configuration.

Internal updates refresh documentation, GitHub Actions dependencies, and fast-xml-parser.

Breaking changes

The actions/local-actions and actions/local-workflow-actions helpers have been removed; migrate to direct $/ action references and remove dependencies on the helpers’ exposed paths or outputs. These references require GitHub.com and GitHub Actions runner 2.336.0 or newer.

What's Changed

Full Changelog: hoverkraft-tech/ci-github-common@0.38.0...0.39.0

Commits
  • ab69f41 docs: update actions and workflows documentation
  • a3ee349 fix(ci): pin shared super-linter image by digest
  • 467cdd3 feat: share linting defaults and remove local action helpers
  • 46b37cf chore: bump the github-actions-dependencies group across 2 directories with 2...
  • d6339c7 chore: bump the github-actions-dependencies group across 1 directory with 4 u...
  • 7c8a12e chore: bump fast-xml-parser
  • d470912 chore: bump the github-actions-dependencies group across 1 directory with 3 u...
  • 546a624 chore: bump the github-actions-dependencies group across 1 directory with 2 u...
  • b6dd60c chore: bump fast-xml-parser
  • efc2024 feat(linter): align Super-Linter defaults with workflow behavior
  • Additional commits viewable in compare view

Updates hoverkraft-tech/ci-github-common/actions/local-workflow-actions from 0.38.0 to 0.39.0

Release notes

Sourced from hoverkraft-tech/ci-github-common/actions/local-workflow-actions's releases.

0.39.0

Release Summary

Linting now shares Super-Linter defaults across local and CI runs for consistent configuration. Super-Linter summaries are enabled by default, with fallback Conventional Commits rules when commitlint is enabled without a project configuration.

Internal updates refresh documentation, GitHub Actions dependencies, and fast-xml-parser.

Breaking changes

The actions/local-actions and actions/local-workflow-actions helpers have been removed; migrate to direct $/ action references and remove dependencies on the helpers’ exposed paths or outputs. These references require GitHub.com and GitHub Actions runner 2.336.0 or newer.

What's Changed

@dependabot
chore(deps): bump the github-actions-dependencies group across 5 dire…
5616e73 
…ctories with 18 updates

Bumps the github-actions-dependencies group with 12 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [hoverkraft-tech/ci-github-common/.github/workflows/greetings.yml](https://github.com/hoverkraft-tech/ci-github-common) | `0.38.0` | `0.39.0` |
| [hoverkraft-tech/ci-github-publish/.github/workflows/release-actions.yml](https://github.com/hoverkraft-tech/ci-github-publish) | `0.28.0` | `0.29.0` |
| [hoverkraft-tech/ci-github-common/.github/workflows/need-fix-to-issue.yml](https://github.com/hoverkraft-tech/ci-github-common) | `0.38.0` | `0.39.0` |
| [actions/create-github-app-token](https://github.com/actions/create-github-app-token) | `3.2.0` | `3.3.0` |
| [hoverkraft-tech/ci-github-common/.github/workflows/semantic-pull-request.yml](https://github.com/hoverkraft-tech/ci-github-common) | `0.38.0` | `0.39.0` |
| [hoverkraft-tech/ci-github-common/.github/workflows/linter.yml](https://github.com/hoverkraft-tech/ci-github-common) | `0.38.0` | `0.39.0` |
| [hoverkraft-tech/ci-github-common/.github/workflows/stale.yml](https://github.com/hoverkraft-tech/ci-github-common) | `0.38.0` | `0.39.0` |
| [hoverkraft-tech/ci-github-common/actions/checkout](https://github.com/hoverkraft-tech/ci-github-common) | `0.38.0` | `0.39.0` |
| [hoverkraft-tech/ci-github-common/actions/local-workflow-actions](https://github.com/hoverkraft-tech/ci-github-common) | `0.38.0` | `0.39.0` |
| [hoverkraft-tech/ci-github-common/actions/set-matrix-output](https://github.com/hoverkraft-tech/ci-github-common) | `0.38.0` | `0.39.0` |
| [hoverkraft-tech/ci-github-common/actions/get-matrix-outputs](https://github.com/hoverkraft-tech/ci-github-common) | `0.38.0` | `0.39.0` |
| [hoverkraft-tech/ci-github-common/actions/repository-owner-is-organization](https://github.com/hoverkraft-tech/ci-github-common) | `0.38.0` | `0.39.0` |
| [hoverkraft-tech/ci-github-common/actions/checkout](https://github.com/hoverkraft-tech/ci-github-common) | `0.38.0` | `0.39.0` |
| [actions/create-github-app-token](https://github.com/actions/create-github-app-token) | `3.2.0` | `3.3.0` |
| [hoverkraft-tech/ci-github-common/actions/checkout](https://github.com/hoverkraft-tech/ci-github-common) | `0.38.0` | `0.39.0` |

Bumps the github-actions-dependencies group with 3 updates in the /actions/docker/build-image directory: [hoverkraft-tech/ci-github-common/actions/local-actions](https://github.com/hoverkraft-tech/ci-github-common), [hoverkraft-tech/ci-github-common/actions/slugify](https://github.com/hoverkraft-tech/ci-github-common) and [int128/docker-build-cache-config-action](https://github.com/int128/docker-build-cache-config-action).
Bumps the github-actions-dependencies group with 4 updates in the /actions/helm/generate-docs directory: [actions/create-github-app-token](https://github.com/actions/create-github-app-token), [hoverkraft-tech/ci-github-common/actions/checkout](https://github.com/hoverkraft-tech/ci-github-common), [hoverkraft-tech/ci-github-nodejs/actions/setup-node](https://github.com/hoverkraft-tech/ci-github-nodejs) and [hoverkraft-tech/ci-github-common/actions/create-and-merge-pull-request](https://github.com/hoverkraft-tech/ci-github-common).
Bumps the github-actions-dependencies group with 3 updates in the /actions/helm/release-chart directory: [hoverkraft-tech/ci-github-common/actions/checkout](https://github.com/hoverkraft-tech/ci-github-common), [hoverkraft-tech/ci-github-common/actions/local-actions](https://github.com/hoverkraft-tech/ci-github-common) and [hoverkraft-tech/ci-github-nodejs/actions/setup-node](https://github.com/hoverkraft-tech/ci-github-nodejs).
Bumps the github-actions-dependencies group with 1 update in the /actions/helm/update-chart-values directory: [mikefarah/yq](https://github.com/mikefarah/yq).


Updates `hoverkraft-tech/ci-github-common/.github/workflows/greetings.yml` from 0.38.0 to 0.39.0
- [Release notes](https://github.com/hoverkraft-tech/ci-github-common/releases)
- [Commits](hoverkraft-tech/ci-github-common@3a27d31...ab69f41)

Updates `hoverkraft-tech/ci-github-publish/.github/workflows/release-actions.yml` from 0.28.0 to 0.29.0
- [Release notes](https://github.com/hoverkraft-tech/ci-github-publish/releases)
- [Commits](hoverkraft-tech/ci-github-publish@1ee0354...a0a9d18)

Updates `hoverkraft-tech/ci-github-common/.github/workflows/need-fix-to-issue.yml` from 0.38.0 to 0.39.0
- [Release notes](https://github.com/hoverkraft-tech/ci-github-common/releases)
- [Commits](hoverkraft-tech/ci-github-common@3a27d31...ab69f41)

Updates `actions/create-github-app-token` from 3.2.0 to 3.3.0
- [Release notes](https://github.com/actions/create-github-app-token/releases)
- [Changelog](https://github.com/actions/create-github-app-token/blob/main/CHANGELOG.md)
- [Commits](actions/create-github-app-token@bcd2ba4...64ab729)

Updates `hoverkraft-tech/ci-github-common/.github/workflows/semantic-pull-request.yml` from 0.38.0 to 0.39.0
- [Release notes](https://github.com/hoverkraft-tech/ci-github-common/releases)
- [Commits](hoverkraft-tech/ci-github-common@3a27d31...ab69f41)

Updates `hoverkraft-tech/ci-github-common/.github/workflows/linter.yml` from 0.38.0 to 0.39.0
- [Release notes](https://github.com/hoverkraft-tech/ci-github-common/releases)
- [Commits](hoverkraft-tech/ci-github-common@3a27d31...ab69f41)

Updates `hoverkraft-tech/ci-github-common/.github/workflows/stale.yml` from 0.38.0 to 0.39.0
- [Release notes](https://github.com/hoverkraft-tech/ci-github-common/releases)
- [Commits](hoverkraft-tech/ci-github-common@3a27d31...ab69f41)

Updates `hoverkraft-tech/ci-github-common/actions/checkout` from 0.38.0 to 0.39.0
- [Release notes](https://github.com/hoverkraft-tech/ci-github-common/releases)
- [Commits](hoverkraft-tech/ci-github-common@3a27d31...ab69f41)

Updates `hoverkraft-tech/ci-github-common/actions/local-workflow-actions` from 0.38.0 to 0.39.0
- [Release notes](https://github.com/hoverkraft-tech/ci-github-common/releases)
- [Commits](hoverkraft-tech/ci-github-common@3a27d31...ab69f41)

Updates `hoverkraft-tech/ci-github-common/actions/set-matrix-output` from 0.38.0 to 0.39.0
- [Release notes](https://github.com/hoverkraft-tech/ci-github-common/releases)
- [Commits](hoverkraft-tech/ci-github-common@3a27d31...ab69f41)

Updates `hoverkraft-tech/ci-github-common/actions/get-matrix-outputs` from 0.38.0 to 0.39.0
- [Release notes](https://github.com/hoverkraft-tech/ci-github-common/releases)
- [Commits](hoverkraft-tech/ci-github-common@3a27d31...ab69f41)

Updates `hoverkraft-tech/ci-github-common/actions/repository-owner-is-organization` from 0.38.0 to 0.39.0
- [Release notes](https://github.com/hoverkraft-tech/ci-github-common/releases)
- [Commits](hoverkraft-tech/ci-github-common@3a27d31...ab69f41)

Updates `hoverkraft-tech/ci-github-common/actions/checkout` from 0.38.0 to 0.39.0
- [Release notes](https://github.com/hoverkraft-tech/ci-github-common/releases)
- [Commits](hoverkraft-tech/ci-github-common@3a27d31...ab69f41)

Updates `actions/create-github-app-token` from 3.2.0 to 3.3.0
- [Release notes](https://github.com/actions/create-github-app-token/releases)
- [Changelog](https://github.com/actions/create-github-app-token/blob/main/CHANGELOG.md)
- [Commits](actions/create-github-app-token@bcd2ba4...64ab729)

Updates `hoverkraft-tech/ci-github-common/actions/checkout` from 0.38.0 to 0.39.0
- [Release notes](https://github.com/hoverkraft-tech/ci-github-common/releases)
- [Commits](hoverkraft-tech/ci-github-common@3a27d31...ab69f41)

Updates `hoverkraft-tech/ci-github-common/actions/local-actions` from 0.38.0 to 0.39.0
- [Release notes](https://github.com/hoverkraft-tech/ci-github-common/releases)
- [Commits](hoverkraft-tech/ci-github-common@3a27d31...ab69f41)

Updates `hoverkraft-tech/ci-github-common/actions/slugify` from 0.38.0 to 0.39.0
- [Release notes](https://github.com/hoverkraft-tech/ci-github-common/releases)
- [Commits](hoverkraft-tech/ci-github-common@3a27d31...ab69f41)

Updates `int128/docker-build-cache-config-action` from 1.71.0 to 1.72.0
- [Release notes](https://github.com/int128/docker-build-cache-config-action/releases)
- [Commits](int128/docker-build-cache-config-action@97740da...7f0a2da)

Updates `hoverkraft-tech/ci-github-common/actions/local-actions` from 0.38.0 to 0.39.0
- [Release notes](https://github.com/hoverkraft-tech/ci-github-common/releases)
- [Commits](hoverkraft-tech/ci-github-common@3a27d31...ab69f41)

Updates `actions/create-github-app-token` from 3.2.0 to 3.3.0
- [Release notes](https://github.com/actions/create-github-app-token/releases)
- [Changelog](https://github.com/actions/create-github-app-token/blob/main/CHANGELOG.md)
- [Commits](actions/create-github-app-token@bcd2ba4...64ab729)

Updates `hoverkraft-tech/ci-github-common/actions/checkout` from 0.38.0 to 0.39.0
- [Release notes](https://github.com/hoverkraft-tech/ci-github-common/releases)
- [Commits](hoverkraft-tech/ci-github-common@3a27d31...ab69f41)

Updates `hoverkraft-tech/ci-github-common/actions/checkout` from 0.38.0 to 0.39.0
- [Release notes](https://github.com/hoverkraft-tech/ci-github-common/releases)
- [Commits](hoverkraft-tech/ci-github-common@3a27d31...ab69f41)

Updates `hoverkraft-tech/ci-github-nodejs/actions/setup-node` from 0.24.4 to 0.25.0
- [Release notes](https://github.com/hoverkraft-tech/ci-github-nodejs/releases)
- [Commits](hoverkraft-tech/ci-github-nodejs@df34807...81a4bca)

Updates `actions/create-github-app-token` from 3.2.0 to 3.3.0
- [Release notes](https://github.com/actions/create-github-app-token/releases)
- [Changelog](https://github.com/actions/create-github-app-token/blob/main/CHANGELOG.md)
- [Commits](actions/create-github-app-token@bcd2ba4...64ab729)

Updates `hoverkraft-tech/ci-github-common/actions/create-and-merge-pull-request` from 0.38.0 to 0.39.0
- [Release notes](https://github.com/hoverkraft-tech/ci-github-common/releases)
- [Commits](hoverkraft-tech/ci-github-common@3a27d31...ab69f41)

Updates `hoverkraft-tech/ci-github-common/actions/checkout` from 0.38.0 to 0.39.0
- [Release notes](https://github.com/hoverkraft-tech/ci-github-common/releases)
- [Commits](hoverkraft-tech/ci-github-common@3a27d31...ab69f41)

Updates `hoverkraft-tech/ci-github-nodejs/actions/setup-node` from 0.24.4 to 0.25.0
- [Release notes](https://github.com/hoverkraft-tech/ci-github-nodejs/releases)
- [Commits](hoverkraft-tech/ci-github-nodejs@df34807...81a4bca)

Updates `hoverkraft-tech/ci-github-common/actions/checkout` from 0.38.0 to 0.39.0
- [Release notes](https://github.com/hoverkraft-tech/ci-github-common/releases)
- [Commits](hoverkraft-tech/ci-github-common@3a27d31...ab69f41)

Updates `hoverkraft-tech/ci-github-common/actions/local-actions` from 0.38.0 to 0.39.0
- [Release notes](https://github.com/hoverkraft-tech/ci-github-common/releases)
- [Commits](hoverkraft-tech/ci-github-common@3a27d31...ab69f41)

Updates `hoverkraft-tech/ci-github-common/actions/checkout` from 0.38.0 to 0.39.0
- [Release notes](https://github.com/hoverkraft-tech/ci-github-common/releases)
- [Commits](hoverkraft-tech/ci-github-common@3a27d31...ab69f41)

Updates `hoverkraft-tech/ci-github-nodejs/actions/setup-node` from 0.24.4 to 0.25.0
- [Release notes](https://github.com/hoverkraft-tech/ci-github-nodejs/releases)
- [Commits](hoverkraft-tech/ci-github-nodejs@df34807...81a4bca)

Updates `hoverkraft-tech/ci-github-common/actions/checkout` from 0.38.0 to 0.39.0
- [Release notes](https://github.com/hoverkraft-tech/ci-github-common/releases)
- [Commits](hoverkraft-tech/ci-github-common@3a27d31...ab69f41)

Updates `hoverkraft-tech/ci-github-common/actions/local-actions` from 0.38.0 to 0.39.0
- [Release notes](https://github.com/hoverkraft-tech/ci-github-common/releases)
- [Commits](hoverkraft-tech/ci-github-common@3a27d31...ab69f41)

Updates `hoverkraft-tech/ci-github-nodejs/actions/setup-node` from 0.24.4 to 0.25.0
- [Release notes](https://github.com/hoverkraft-tech/ci-github-nodejs/releases)
- [Commits](hoverkraft-tech/ci-github-nodejs@df34807...81a4bca)

Updates `mikefarah/yq` from 4.53.6 to 4.54.1
- [Release notes](https://github.com/mikefarah/yq/releases)
- [Changelog](https://github.com/mikefarah/yq/blob/master/release_notes.txt)
- [Commits](mikefarah/yq@c14f446...504fc38)

---
updated-dependencies:
- dependency-name: hoverkraft-tech/ci-github-common/.github/workflows/greetings.yml
  dependency-version: 0.39.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions-dependencies
- dependency-name: hoverkraft-tech/ci-github-publish/.github/workflows/release-actions.yml
  dependency-version: 0.29.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions-dependencies
- dependency-name: hoverkraft-tech/ci-github-common/.github/workflows/need-fix-to-issue.yml
  dependency-version: 0.39.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions-dependencies
- dependency-name: actions/create-github-app-token
  dependency-version: 3.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions-dependencies
- dependency-name: hoverkraft-tech/ci-github-common/.github/workflows/semantic-pull-request.yml
  dependency-version: 0.39.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions-dependencies
- dependency-name: hoverkraft-tech/ci-github-common/.github/workflows/linter.yml
  dependency-version: 0.39.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions-dependencies
- dependency-name: hoverkraft-tech/ci-github-common/.github/workflows/stale.yml
  dependency-version: 0.39.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions-dependencies
- dependency-name: hoverkraft-tech/ci-github-common/actions/checkout
  dependency-version: 0.39.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions-dependencies
- dependency-name: hoverkraft-tech/ci-github-common/actions/local-workflow-actions
  dependency-version: 0.39.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions-dependencies
- dependency-name: hoverkraft-tech/ci-github-common/actions/set-matrix-output
  dependency-version: 0.39.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions-dependencies
- dependency-name: hoverkraft-tech/ci-github-common/actions/get-matrix-outputs
  dependency-version: 0.39.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions-dependencies
- dependency-name: hoverkraft-tech/ci-github-common/actions/repository-owner-is-organization
  dependency-version: 0.39.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions-dependencies
- dependency-name: hoverkraft-tech/ci-github-common/actions/checkout
  dependency-version: 0.39.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions-dependencies
- dependency-name: actions/create-github-app-token
  dependency-version: 3.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions-dependencies
- dependency-name: hoverkraft-tech/ci-github-common/actions/checkout
  dependency-version: 0.39.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions-dependencies
- dependency-name: hoverkraft-tech/ci-github-common/actions/local-actions
  dependency-version: 0.39.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions-dependencies
- dependency-name: hoverkraft-tech/ci-github-common/actions/slugify
  dependency-version: 0.39.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions-dependencies
- dependency-name: int128/docker-build-cache-config-action
  dependency-version: 1.72.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions-dependencies
- dependency-name: hoverkraft-tech/ci-github-common/actions/local-actions
  dependency-version: 0.39.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions-dependencies
- dependency-name: actions/create-github-app-token
  dependency-version: 3.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions-dependencies
- dependency-name: hoverkraft-tech/ci-github-common/actions/checkout
  dependency-version: 0.39.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions-dependencies
- dependency-name: hoverkraft-tech/ci-github-common/actions/checkout
  dependency-version: 0.39.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions-dependencies
- dependency-name: hoverkraft-tech/ci-github-nodejs/actions/setup-node
  dependency-version: 0.25.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions-dependencies
- dependency-name: actions/create-github-app-token
  dependency-version: 3.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions-dependencies
- dependency-name: hoverkraft-tech/ci-github-common/actions/create-and-merge-pull-request
  dependency-version: 0.39.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions-dependencies
- dependency-name: hoverkraft-tech/ci-github-common/actions/checkout
  dependency-version: 0.39.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions-dependencies
- dependency-name: hoverkraft-tech/ci-github-nodejs/actions/setup-node
  dependency-version: 0.25.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions-dependencies
- dependency-name: hoverkraft-tech/ci-github-common/actions/checkout
  dependency-version: 0.39.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions-dependencies
- dependency-name: hoverkraft-tech/ci-github-common/actions/local-actions
  dependency-version: 0.39.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions-dependencies
- dependency-name: hoverkraft-tech/ci-github-common/actions/checkout
  dependency-version: 0.39.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions-dependencies
- dependency-name: hoverkraft-tech/ci-github-nodejs/actions/setup-node
  dependency-version: 0.25.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions-dependencies
- dependency-name: hoverkraft-tech/ci-github-common/actions/checkout
  dependency-version: 0.39.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions-dependencies
- dependency-name: hoverkraft-tech/ci-github-common/actions/local-actions
  dependency-version: 0.39.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions-dependencies
- dependency-name: hoverkraft-tech/ci-github-nodejs/actions/setup-node
  dependency-version: 0.25.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions-dependencies
- dependency-name: mikefarah/yq
  dependency-version: 4.54.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Oct 23, 2026
@github-actions

github-actions Bot commented Oct 23, 2026

Copy link
Copy Markdown
Contributor

Hi, thank you for creating your PR, we will check it out very soon

@github-actions

github-actions Bot commented Oct 23, 2026

Copy link
Copy Markdown
Contributor

Super-linter summary

Language Validation result
BIOME_FORMAT Pass ✅
BIOME_LINT Pass ✅
CHECKOV Pass ✅
GITHUB_ACTIONS Pass ✅
GITHUB_ACTIONS_ZIZMOR Fail ❌
GITLEAKS Pass ✅
GIT_COMMITLINT Pass ✅
GIT_MERGE_CONFLICT_MARKERS Pass ✅
JSCPD Pass ✅
PRE_COMMIT Pass ✅
SPELL_CODESPELL Pass ✅
TRIVY Fail ❌
YAML Pass ✅
YAML_PRETTIER Pass ✅

Super-linter detected linting errors

For more information, see the GitHub Actions workflow run

Powered by Super-linter
Super-linter revision: 2da136927bd4a73596db63044b504547c62cb854
Super-linter version: 9.0.0

GITHUB_ACTIONS_ZIZMOR 
�[1m�[96mhelp[self-repository]�[0m�[1m: use GitHub's dedicated self-repository syntax�[0m
  �[1m�[94m--> �[0m/github/workspace/.github/workflows/__main-ci.yml:22:11
   �[1m�[94m|�[0m
�[1m�[94m21�[0m �[1m�[94m|�[0m   ci:
   �[1m�[94m|�[0m   �[1m�[94m--�[0m �[1m�[94mthis job�[0m
�[1m�[94m22�[0m �[1m�[94m|�[0m     uses: ./.github/workflows/__shared-ci.yml
   �[1m�[94m|�[0m           �[1m�[96m^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^�[0m �[1m�[96muse '$/...' instead of './...'�[0m
   �[1m�[94m|�[0m
   �[1m�[94m= �[0m�[1mnote�[0m: audit confidence → High
   �[1m�[94m= �[0m�[1mnote�[0m: this finding has an auto-fix
   �[1m�[94m= �[0m�[1mhelp�[0m: audit documentation → �[32mhttps://docs.zizmor.sh/audits/#self-repository�[39m

�[1m�[96mhelp[self-repository]�[0m�[1m: use GitHub's dedicated self-repository syntax�[0m
  �[1m�[94m--> �[0m/github/workspace/.github/workflows/__main-ci.yml:40:11
   �[1m�[94m|�[0m
�[1m�[94m38�[0m �[1m�[94m|�[0m   clean:
   �[1m�[94m|�[0m   �[1m�[94m-----�[0m �[1m�[94mthis job�[0m
�[1m�[94m39�[0m �[1m�[94m|�[0m     needs: ci
�[1m�[94m40�[0m �[1m�[94m|�[0m     uses: ./.github/workflows/prune-pull-requests-images-tags.yml
   �[1m�[94m|�[0m           �[1m�[96m^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^�[0m �[1m�[96muse '$/...' instead of './...'�[0m
   �[1m�[94m|�[0m
   �[1m�[94m= �[0m�[1mnote�[0m: audit confidence → High
   �[1m�[94m= �[0m�[1mnote�[0m: this finding has an auto-fix
   �[1m�[94m= �[0m�[1mhelp�[0m: audit documentation → �[32mhttps://docs.zizmor.sh/audits/#self-repository�[39m

�[1m�[96mhelp[self-repository]�[0m�[1m: use GitHub's dedicated self-repository syntax�[0m
  �[1m�[94m--> �[0m/github/workspace/.github/workflows/__main-ci.yml:58:11
   �[1m�[94m|�[0m
�[1m�[94m56�[0m �[1m�[94m|�[0m   clean-with-cache:
   �[1m�[94m|�[0m   �[1m�[94m----------------�[0m �[1m�[94mthis job�[0m
�[1m�[94m57�[0m �[1m�[94m|�[0m     needs: ci
�[1m�[94m58�[0m �[1m�[94m|�[0m     uses: ./.github/workflows/prune-pull-requests-images-tags.yml
   �[1m�[94m|�[0m           �[1m�[96m^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^�[0m �[1m�[96muse '$/...' instead of './...'�[0m
   �[1m�[94m|�[0m
   �[1m�[94m= �[0m�[1mnote�[0m: audit confidence → High
   �[1m�[94m= �[0m�[1mnote�[0m: this finding has an auto-fix
   �[1m�[94m= �[0m�[1mhelp�[0m: audit documentation → �[32mhttps://docs.zizmor.sh/audits/#self-repository�[39m

�[1m�[96mhelp[self-repository]�[0m�[1m: use GitHub's dedicated self-repository syntax�[0m
  �[1m�[94m--> �[0m/github/workspace/.github/workflows/__main-ci.yml:85:15
   �[1m�[94m|�[0m
�[1m�[94m85�[0m �[1m�[94m|�[0m         - uses: ./actions/helm/generate-docs
   �[1m�[94m|�[0m           �[1m�[94m-�[0m     �[1m�[96m^^^^^^^^^^^^^^^^^^^^^^^^^^^^�[0m �[1m�[96muse '$/...' instead of './...'�[0m
   �[1m�[94m|�[0m �[1m�[94m _________|�[0m
   �[1m�[94m|�[0m �[1m�[94m|�[0m
�[1m�[94m86�[0m �[1m�[94m|�[0m �[1m�[94m|�[0m         with:
�[1m�[94m87�[0m �[1m�[94m|�[0m �[1m�[94m|�[0m           working-directory: ./tests/charts
�[1m�[94m88�[0m �[1m�[94m|�[0m �[1m�[94m|�[0m           github-app-client-id: ${{ vars.CI_BOT_APP_CLIENT_ID }}
�[1m�[94m89�[0m �[1m�[94m|�[0m �[1m�[94m|�[0m           github-app-key: ${{ secrets.CI_BOT_APP_PRIVATE_KEY }} # zizmor: ignore[secrets-outside-env]
   �[1m�[94m|�[0m �[1m�[94m|_____________________________________________________________________________________________________-�[0m �[1m�[94mthis step�[0m
   �[1m�[94m|�[0m
   �[1m�[94m= �[0m�[1mnote�[0m: audit confidence → High
   �[1m�[94m= �[0m�[1mnote�[0m: this finding has an auto-fix
   �[1m�[94m= �[0m�[1mhelp�[0m: audit documentation → �[32mhttps://docs.zizmor.sh/audits/#self-repository�[39m

�[1m�[96mhelp[self-repository]�[0m�[1m: use GitHub's dedicated self-repository syntax�[0m
  �[1m�[94m--> �[0m/github/workspace/.github/workflows/__shared-ci.yml:26:11
   �[1m�[94m|�[0m
�[1m�[94m24�[0m �[1m�[94m|�[0m   test-action-docker-build-image:
   �[1m�[94m|�[0m   �[1m�[94m------------------------------�[0m �[1m�[94mthis job�[0m
�[1m�[94m25�[0m �[1m�[94m|�[0m     needs: linter
�[1m�[94m26�[0m �[1m�[94m|�[0m     uses: ./.github/workflows/__test-action-docker-build-image.yml
   �[1m�[94m|�[0m           �[1m�[96m^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^�[0m �[1m�[96muse '$/...' instead of './...'�[0m
   �[1m�[94m|�[0m
   �[1m�[94m= �[0m�[1mnote�[0m: audit confidence → High
   �[1m�[94m= �[0m�[1mnote�[0m: this finding has an auto-fix
   �[1m�[94m= �[0m�[1mhelp�[0m: audit documentation → �[32mhttps://docs.zizmor.sh/audits/#self-repository�[39m

�[1m�[96mhelp[self-repository]�[0m�[1m: use GitHub's dedicated self-repository syntax�[0m
  �[1m�[94m--> �[0m/github/workspace/.github/workflows/__shared-ci.yml:33:11
   �[1m�[94m|�[0m
�[1m�[94m31�[0m �[1m�[94m|�[0m   test-action-docker-create-images-manifests:
   �[1m�[94m|�[0m   �[1m�[94m------------------------------------------�[0m �[1m�[94mthis job�[0m
�[1m�[94m32�[0m �[1m�[94m|�[0m     needs: linter
�[1m�[94m33�[0m �[1m�[94m|�[0m     uses: ./.github/workflows/__test-action-docker-create-images-manifests.yml
   �[1m�[94m|�[0m           �[1m�[96m^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^�[0m �[1m�[96muse '$/...' instead of './...'�[0m
   �[1m�[94m|�[0m
   �[1m�[94m= �[0m�[1mnote�[0m: audit confidence → High
   �[1m�[94m= �[0m�[1mnote�[0m: this finding has an auto-fix
   �[1m�[94m= �[0m�[1mhelp�[0m: audit documentation → �[32mhttps://docs.zizmor.sh/audits/#self-repository�[39m

�[1m�[96mhelp[self-repository]�[0m�[1m: use GitHub's dedicated self-repository syntax�[0m
  �[1m�[94m--> �[0m/github/workspace/.github/workflows/__shared-ci.yml:44:11
   �[1m�[94m|�[0m
�[1m�[94m42�[0m �[1m�[94m|�[0m   test-action-docker-setup:
   �[1m�[94m|�[0m   �[1m�[94m------------------------�[0m �[1m�[94mthis job�[0m
�[1m�[94m43�[0m �[1m�[94m|�[0m     needs: linter
�[1m�[94m44�[0m �[1m�[94m|�[0m     uses: ./.github/workflows/__test-action-docker-setup.yml
   �[1m�[94m|�[0m           �[1m�[96m^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^�[0m �[1m�[96muse '$/...' instead of './...'�[0m
   �[1m�[94m|�[0m
   �[1m�[94m= �[0m�[1mnote�[0m: audit confidence → High
   �[1m�[94m= �[0m�[1mnote�[0m: this finding has an auto-fix
   �[1m�[94m= �[0m�[1mhelp�[0m: audit documentation → �[32mhttps://docs.zizmor.sh/audits/#self-repository�[39m

�[1m�[96mhelp[self-repository]�[0m�[1m: use GitHub's dedicated self-repository syntax�[0m
  �[1m�[94m--> �[0m/github/workspace/.github/workflows/__shared-ci.yml:50:11
   �[1m�[94m|�[0m
�[1m�[94m48�[0m �[1m�[94m|�[0m   test-action-docker-prune-pull-requests-image-tags:
   �[1m�[94m|�[0m   �[1m�[94m-------------------------------------------------�[0m �[1m�[94mthis job�[0m
�[1m�[94m49�[0m �[1m�[94m|�[0m     needs: linter
�[1m�[94m50�[0m �[1m�[94m|�[0m     uses: ./.github/workflows/__test-action-docker-prune-pull-requests-image-tags.yml
   �[1m�[94m|�[0m           �[1m�[96m^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^�[0m �[1m�[96muse '$/...' instead of './...'�[0m
   �[1m�[94m|�[0m
   �[1m�[94m= �[0m�[1mnote�[0m: audit confidence → High
   �[1m�[94m= �[0m�[1mnote�[0m: this finding has an auto-fix
   �[1m�[94m= �[0m�[1mhelp�[0m: audit documentation → �[32mhttps://docs.zizmor.sh/audits/#self-repository�[39m

�[1m�[96mhelp[self-repository]�[0m�[1m: use GitHub's dedicated self-repository syntax�[0m
  �[1m�[94m--> �[0m/github/workspace/.github/workflows/__shared-ci.yml:61:11
   �[1m�[94m|�[0m
�[1m�[94m59�[0m �[1m�[94m|�[0m   test-action-get-image-metadata:
   �[1m�[94m|�[0m   �[1m�[94m------------------------------�[0m �[1m�[94mthis job�[0m
�[1m�[94m60�[0m �[1m�[94m|�[0m     needs: linter
�[1m�[94m61�[0m �[1m�[94m|�[0m     uses: ./.github/workflows/__test-action-get-image-metadata.yml
   �[1m�[94m|�[0m           �[1m�[96m^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^�[0m �[1m�[96muse '$/...' instead of './...'�[0m
   �[1m�[94m|�[0m
   �[1m�[94m= �[0m�[1mnote�[0m: audit confidence → High
   �[1m�[94m= �[0m�[1mnote�[0m: this finding has an auto-fix
   �[1m�[94m= �[0m�[1mhelp�[0m: audit documentation → �[32mhttps://docs.zizmor.sh/audits/#self-repository�[39m

�[1m�[96mhelp[self-repository]�[0m�[1m: use GitHub's dedicated self-repository syntax�[0m
  �[1m�[94m--> �[0m/github/workspace/.github/workflows/__shared-ci.yml:67:11
   �[1m�[94m|�[0m
�[1m�[94m65�[0m �[1m�[94m|�[0m   test-action-action-get-image-name:
   �[1m�[94m|�[0m   �[1m�[94m---------------------------------�[0m �[1m�[94mthis job�[0m
�[1m�[94m66�[0m �[1m�[94m|�[0m     needs: linter
�[1m�[94m67�[0m �[1m�[94m|�[0m     uses: ./.github/workflows/__test-action-get-image-name.yml
   �[1m�[94m|�[0m           �[1m�[96m^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^�[0m �[1m�[96muse '$/...' instead of './...'�[0m
   �[1m�[94m|�[0m
   �[1m�[94m= �[0m�[1mnote�[0m: audit confidence → High
   �[1m�[94m= �[0m�[1mnote�[0m: this finding has an auto-fix
   �[1m�[94m= �[0m�[1mhelp�[0m: audit documentation → �[32mhttps://docs.zizmor.sh/audits/#self-repository�[39m

�[1m�[96mhelp[self-repository]�[0m�[1m: use GitHub's dedicated self-repository syntax�[0m
  �[1m�[94m--> �[0m/github/workspace/.github/workflows/__shared-ci.yml:73:11
   �[1m�[94m|�[0m
�[1m�[94m71�[0m �[1m�[94m|�[0m   test-action-helm-parse-chart-uri:
   �[1m�[94m|�[0m   �[1m�[94m--------------------------------�[0m �[1m�[94mthis job�[0m
�[1m�[94m72�[0m �[1m�[94m|�[0m     needs: linter
�[1m�[94m73�[0m �[1m�[94m|�[0m     uses: ./.github/workflows/__test-action-helm-parse-chart-uri.yml
   �[1m�[94m|�[0m           �[1m�[96m^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^�[0m �[1m�[96muse '$/...' instead of './...'�[0m
   �[1m�[94m|�[0m
   �[1m�[94m= �[0m�[1mnote�[0m: audit confidence → High
   �[1m�[94m= �[0m�[1mnote�[0m: this finding has an auto-fix
   �[1m�[94m= �[0m�[1mhelp�[0m: audit documentation → �[32mhttps://docs.zizmor.sh/audits/#self-repository�[39m

�[1m�[96mhelp[self-repository]�[0m�[1m: use GitHub's dedicated self-repository syntax�[0m
  �[1m�[94m--> �[0m/github/workspace/.github/workflows/__shared-ci.yml:79:11
   �[1m�[94m|�[0m
�[1m�[94m77�[0m �[1m�[94m|�[0m   test-action-helm-sign-chart:
   �[1m�[94m|�[0m   �[1m�[94m---------------------------�[0m �[1m�[94mthis job�[0m
�[1m�[94m78�[0m �[1m�[94m|�[0m     needs: linter
�[1m�[94m79�[0m �[1m�[94m|�[0m     uses: ./.github/workflows/__test-action-helm-sign-chart.yml
   �[1m�[94m|�[0m           �[1m�[96m^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^�[0m �[1m�[96muse '$/...' instead of './...'�[0m
   �[1m�[94m|�[0m
   �[1m�[94m= �[0m�[1mnote�[0m: audit confidence → High
   �[1m�[94m= �[0m�[1mnote�[0m: this finding has an auto-fix
   �[1m�[94m= �[0m�[1mhelp�[0m: audit documentation → �[32mhttps://docs.zizmor.sh/audits/#self-repository�[39m

�[1m�[96mhelp[self-repository]�[0m�[1m: use GitHub's dedicated self-repository syntax�[0m
  �[1m�[94m--> �[0m/github/workspace/.github/workflows/__shared-ci.yml:87:11
   �[1m�[94m|�[0m
�[1m�[94m85�[0m �[1m�[94m|�[0m   test-action-helm-update-chart-values:
   �[1m�[94m|�[0m   �[1m�[94m------------------------------------�[0m �[1m�[94mthis job�[0m
�[1m�[94m86�[0m �[1m�[94m|�[0m     needs: linter
�[1m�[94m87�[0m �[1m�[94m|�[0m     uses: ./.github/workflows/__test-action-helm-update-chart-values.yml
   �[1m�[94m|�[0m           �[1m�[96m^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^�[0m �[1m�[96muse '$/...' instead of './...'�[0m
   �[1m�[94m|�[0m
   �[1m�[94m= �[0m�[1mnote�[0m: audit confidence → High
   �[1m�[94m= �[0m�[1mnote�[0m: this finding has an auto-fix
   �[1m�[94m= �[0m�[1mhelp�[0m: audit documentation → �[32mhttps://docs.zizmor.sh/audits/#self-repository�[39m

�[1m�[96mhelp[self-repository]�[0m�[1m: use GitHub's dedicated self-repository syntax�[0m
  �[1m�[94m--> �[0m/github/workspace/.github/workflows/__shared-ci.yml:93:11
   �[1m�[94m|�[0m
�[1m�[94m91�[0m �[1m�[94m|�[0m   test-action-helm-release-chart:
   �[1m�[94m|�[0m   �[1m�[94m------------------------------�[0m �[1m�[94mthis job�[0m
�[1m�[94m92�[0m �[1m�[94m|�[0m     needs: linter
�[1m�[94m93�[0m �[1m�[94m|�[0m     uses: ./.github/workflows/__test-action-helm-release-chart.yml
   �[1m�[94m|�[0m           �[1m�[96m^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^�[0m �[1m�[96muse '$/...' instead of './...'�[0m
   �[1m�[94m|�[0m
   �[1m�[94m= �[0m�[1mnote�[0m: audit confidence → High
   �[1m�[94m= �[0m�[1mnote�[0m: this finding has an auto-fix
   �[1m�[94m= �[0m�[1mhelp�[0m: audit documentation → �[32mhttps://docs.zizmor.sh/audits/#self-repository�[39m

�[1m�[96mhelp[self-repository]�[0m�[1m: use GitHub's dedicated self-repository syntax�[0m
   �[1m�[94m--> �[0m/github/workspace/.github/workflows/__shared-ci.yml:101:11
    �[1m�[94m|�[0m
�[1m�[94m 99�[0m �[1m�[94m|�[0m   test-action-helm-test-chart:
    �[1m�[94m|�[0m   �[1m�[94m---------------------------�[0m �[1m�[94mthis job�[0m
�[1m�[94m100�[0m �[1m�[94m|�[0m     needs: linter
�[1m�[94m101�[0m �[1m�[94m|�[0m     uses: ./.github/workflows/__test-action-helm-test-chart.yml
    �[1m�[94m|�[0m           �[1m�[96m^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^�[0m �[1m�[96muse '$/...' instead of './...'�[0m
    �[1m�[94m|�[0m
    �[1m�[94m= �[0m�[1mnote�[0m: audit confidence → High
    �[1m�[94m= �[0m�[1mnote�[0m: this finding has an auto-fix
    �[1m�[94m= �[0m�[1mhelp�[0m: audit documentation → �[32mhttps://docs.zizmor.sh/audits/#self-repository�[39m

�[1m�[96mhelp[self-repository]�[0m�[1m: use GitHub's dedicated self-repository syntax�[0m
   �[1m�[94m--> �[0m/github/workspace/.github/workflows/__shared-ci.yml:113:11
    �[1m�[94m|�[0m
�[1m�[94m111�[0m �[1m�[94m|�[0m     name: Test docker build images - Building
    �[1m�[94m|�[0m     �[1m�[94m-----------------------------------------�[0m �[1m�[94mthis job�[0m
�[1m�[94m112�[0m �[1m�[94m|�[0m     needs: linter
�[1m�[94m113�[0m �[1m�[94m|�[0m     uses: ./.github/workflows/__test-workflow-docker-build-images-building.yml
    �[1m�[94m|�[0m           �[1m�[96m^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^�[0m �[1m�[96muse '$/...' instead of './...'�[0m
    �[1m�[94m|�[0m
    �[1m�[94m= �[0m�[1mnote�[0m: audit confidence → High
    �[1m�[94m= �[0m�[1mnote�[0m: this finding has an auto-fix
    �[1m�[94m= �[0m�[1mhelp�[0m: audit documentation → �[32mhttps://docs.zizmor.sh/audits/#self-repository�[39m

�[1m�[96mhelp[self-repository]�[0m�[1m: use GitHub's dedicated self-repository syntax�[0m
   �[1m�[94m--> �[0m/github/workspace/.github/workflows/__shared-ci.yml:127:11
    �[1m�[94m|�[0m
�[1m�[94m125�[0m �[1m�[94m|�[0m     name: Test docker build images - Caching
    �[1m�[94m|�[0m     �[1m�[94m----------------------------------------�[0m �[1m�[94mthis job�[0m
�[1m�[94m126�[0m �[1m�[94m|�[0m     needs: linter
�[1m�[94m127�[0m �[1m�[94m|�[0m     uses: ./.github/workflows/__test-workflow-docker-build-images-caching.yml
    �[1m�[94m|�[0m           �[1m�[96m^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^�[0m �[1m�[96muse '$/...' instead of './...'�[0m
    �[1m�[94m|�[0m
    �[1m�[94m= �[0m�[1mnote�[0m: audit confidence → High
    �[1m�[94m= �[0m�[1mnote�[0m: this finding has an auto-fix
    �[1m�[94m= �[0m�[1mhelp�[0m: audit documentation → �[32mhttps://docs.zizmor.sh/audits/#self-repository�[39m

�[1m�[96mhelp[self-repository]�[0m�[1m: use GitHub's dedicated self-repository syntax�[0m
   �[1m�[94m--> �[0m/github/workspace/.github/workflows/__shared-ci.yml:141:11
    �[1m�[94m|�[0m
�[1m�[94m139�[0m �[1m�[94m|�[0m     name: Test docker build images - Multi registry inputs
    �[1m�[94m|�[0m     �[1m�[94m------------------------------------------------------�[0m �[1m�[94mthis job�[0m
�[1m�[94m140�[0m �[1m�[94m|�[0m     needs: linter
�[1m�[94m141�[0m �[1m�[94m|�[0m     uses: ./.github/workflows/__test-workflow-docker-build-images-multi-registry.yml
    �[1m�[94m|�[0m           �[1m�[96m^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^�[0m �[1m�[96muse '$/...' instead of './...'�[0m
    �[1m�[94m|�[0m
    �[1m�[94m= �[0m�[1mnote�[0m: audit confidence → High
    �[1m�[94m= �[0m�[1mnote�[0m: this finding has an auto-fix
    �[1m�[94m= �[0m�[1mhelp�[0m: audit documentation → �[32mhttps://docs.zizmor.sh/audits/#self-repository�[39m

�[1m�[96mhelp[self-repository]�[0m�[1m: use GitHub's dedicated self-repository syntax�[0m
   �[1m�[94m--> �[0m/github/workspace/.github/workflows/__shared-ci.yml:155:11
    �[1m�[94m|�[0m
�[1m�[94m153�[0m �[1m�[94m|�[0m     name: Test docker build images - Platforms and Signing
    �[1m�[94m|�[0m     �[1m�[94m------------------------------------------------------�[0m �[1m�[94mthis job�[0m
�[1m�[94m154�[0m �[1m�[94m|�[0m     needs: linter
�[1m�[94m155�[0m �[1m�[94m|�[0m     uses: ./.github/workflows/__test-workflow-docker-build-images-platforms-and-signing.yml
    �[1m�[94m|�[0m           �[1m�[96m^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^�[0m �[1m�[96muse '$/...' instead of './...'�[0m
    �[1m�[94m|�[0m
    �[1m�[94m= �[0m�[1mnote�[0m: audit confidence → High
    �[1m�[94m= �[0m�[1mnote�[0m: this finding has an auto-fix
    �[1m�[94m= �[0m�[1mhelp�[0m: audit documentation → �[32mhttps://docs.zizmor.sh/audits/#self-repository�[39m

�[1m�[96mhelp[self-repository]�[0m�[1m: use GitHub's dedicated self-repository syntax�[0m
   �[1m�[94m--> �[0m/github/workspace/.github/workflows/__shared-ci.yml:169:11
    �[1m�[94m|�[0m
�[1m�[94m167�[0m �[1m�[94m|�[0m     name: Test docker build images - Attestation
    �[1m�[94m|�[0m     �[1m�[94m--------------------------------------------�[0m �[1m�[94mthis job�[0m
�[1m�[94m168�[0m �[1m�[94m|�[0m     needs: linter
�[1m�[94m169�[0m �[1m�[94m|�[0m     uses: ./.github/workflows/__test-workflow-docker-build-images-attestation.yml
    �[1m�[94m|�[0m           �[1m�[96m^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^�[0m �[1m�[96muse '$/...' instead of './...'�[0m
    �[1m�[94m|�[0m
    �[1m�[94m= �[0m�[1mnote�[0m: audit confidence → High
    �[1m�[94m= �[0m�[1mnote�[0m: this finding has an auto-fix
    �[1m�[94m= �[0m�[1mhelp�[0m: audit documentation → �[32mhttps://docs.zizmor.sh/audits/#self-repository�[39m

�[1m�[96mhelp[self-repository]�[0m�[1m: use GitHub's dedicated self-repository syntax�[0m
   �[1m�[94m--> �[0m/github/workspace/.github/workflows/docker-build-images.yml:464:15
    �[1m�[94m|�[0m
�[1m�[94m463�[0m �[1m�[94m|�[0m       - id: build
    �[1m�[94m|�[0m         �[1m�[94m---------�[0m �[1m�[94mthis step�[0m
�[1m�[94m464�[0m �[1m�[94m|�[0m         uses: ./../self-workflow/actions/docker/build-image
    �[1m�[94m|�[0m               �[1m�[96m^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^�[0m �[1m�[96muse '$/...' instead of './...'�[0m
    �[1m�[94m|�[0m
    �[1m�[94m= �[0m�[1mnote�[0m: audit confidence → High
    �[1m�[94m= �[0m�[1mnote�[0m: this finding has an auto-fix
    �[1m�[94m= �[0m�[1mhelp�[0m: audit documentation → �[32mhttps://docs.zizmor.sh/audits/#self-repository�[39m

�[1m�[96mhelp[self-repository]�[0m�[1m: use GitHub's dedicated self-repository syntax�[0m
   �[1m�[94m--> �[0m/github/workspace/.github/workflows/docker-build-images.yml:547:15
    �[1m�[94m|�[0m
�[1m�[94m546�[0m �[1m�[94m|�[0m       - id: create-images-manifests
    �[1m�[94m|�[0m         �[1m�[94m---------------------------�[0m �[1m�[94mthis step�[0m
�[1m�[94m547�[0m �[1m�[94m|�[0m         uses: ./../self-workflow/actions/docker/create-images-manifests
    �[1m�[94m|�[0m               �[1m�[96m^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^�[0m �[1m�[96muse '$/...' instead of './...'�[0m
    �[1m�[94m|�[0m
    �[1m�[94m= �[0m�[1mnote�[0m: audit confidence → High
    �[1m�[94m= �[0m�[1mnote�[0m: this finding has an auto-fix
    �[1m�[94m= �[0m�[1mhelp�[0m: audit documentation → �[32mhttps://docs.zizmor.sh/audits/#self-repository�[39m

�[1m�[96mhelp[self-repository]�[0m�[1m: use GitHub's dedicated self-repository syntax�[0m
   �[1m�[94m--> �[0m/github/workspace/.github/workflows/docker-build-images.yml:573:15
    �[1m�[94m|�[0m
�[1m�[94m573�[0m �[1m�[94m|�[0m         - uses: ./../self-workflow/actions/docker/sign-images
    �[1m�[94m|�[0m           �[1m�[94m-�[0m     �[1m�[96m^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^�[0m �[1m�[96muse '$/...' instead of './...'�[0m
    �[1m�[94m|�[0m �[1m�[94m _________|�[0m
    �[1m�[94m|�[0m �[1m�[94m|�[0m
�[1m�[94m574�[0m �[1m�[94m|�[0m �[1m�[94m|�[0m         if: steps.get-images-to-sign.outputs.images-to-sign
�[1m�[94m575�[0m �[1m�[94m|�[0m �[1m�[94m|�[0m         with:
�[1m�[94m576�[0m �[1m�[94m|�[0m �[1m�[94m|�[0m           images: ${{ steps.get-images-to-sign.outputs.images-to-sign }}
�[1m�[94m577�[0m �[1m�[94m|�[0m �[1m�[94m|�[0m           github-token: ${{ secrets.GITHUB_TOKEN }}
    �[1m�[94m|�[0m �[1m�[94m|___________________________________________________-�[0m �[1m�[94mthis step�[0m
    �[1m�[94m|�[0m
    �[1m�[94m= �[0m�[1mnote�[0m: audit confidence → High
    �[1m�[94m= �[0m�[1mnote�[0m: this finding has an auto-fix
    �[1m�[94m= �[0m�[1mhelp�[0m: audit documentation → �[32mhttps://docs.zizmor.sh/audits/#self-repository�[39m

�[1m�[96mhelp[self-repository]�[0m�[1m: use GitHub's dedicated self-repository syntax�[0m
   �[1m�[94m--> �[0m/github/workspace/.github/workflows/docker-build-images.yml:629:15
    �[1m�[94m|�[0m
�[1m�[94m629�[0m �[1m�[94m|�[0m         - uses: ./../self-workflow/actions/docker/setup
    �[1m�[94m|�[0m           �[1m�[94m-�[0m     �[1m�[96m^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^�[0m �[1m�[96muse '$/...' instead of './...'�[0m
    �[1m�[94m|�[0m �[1m�[94m _________|�[0m
    �[1m�[94m|�[0m �[1m�[94m|�[0m
�[1m�[94m630�[0m �[1m�[94m|�[0m �[1m�[94m|�[0m         with:
�[1m�[94m631�[0m �[1m�[94m|�[0m �[1m�[94m|�[0m           oci-registry: ${{ inputs.oci-registry }}
�[1m�[94m632�[0m �[1m�[94m|�[0m �[1m�[94m|�[0m           oci-registry-username: ${{ inputs.oci-registry-username }}
�[1m�[94m633�[0m �[1m�[94m|�[0m �[1m�[94m|�[0m           oci-registry-password: ${{ secrets.oci-registry-password }} # zizmor: ignore[secrets-outside-env]
�[1m�[94m634�[0m �[1m�[94m|�[0m �[1m�[94m|�[0m           built-images: ${{ needs.publish-manifests.outputs.built-images }}
�[1m�[94m635�[0m �[1m�[94m|�[0m �[1m�[94m|�[0m           setup-buildx: false
    �[1m�[94m|�[0m �[1m�[94m|_____________________________-�[0m �[1m�[94mthis step�[0m
    �[1m�[94m|�[0m
    �[1m�[94m= �[0m�[1mnote�[0m: audit confidence → High
    �[1m�[94m= �[0m�[1mnote�[0m: this finding has an auto-fix
    �[1m�[94m= �[0m�[1mhelp�[0m: audit documentation → �[32mhttps://docs.zizmor.sh/audits/#self-repository�[39m

�[1m�[96mhelp[self-repository]�[0m�[1m: use GitHub's dedicated self-repository syntax�[0m
   �[1m�[94m--> �[0m/github/workspace/.github/workflows/docker-build-images.yml:637:15
    �[1m�[94m|�[0m
�[1m�[94m637�[0m �[1m�[94m|�[0m         - uses: ./../self-workflow/actions/docker/attest-image
    �[1m�[94m|�[0m           �[1m�[94m-�[0m     �[1m�[96m^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^�[0m �[1m�[96muse '$/...' instead of './...'�[0m
    �[1m�[94m|�[0m �[1m�[94m _________|�[0m
    �[1m�[94m|�[0m �[1m�[94m|�[0m
�[1m�[94m638�[0m �[1m�[94m|�[0m �[1m�[94m|�[0m         with:
�[1m�[94m639�[0m �[1m�[94m|�[0m �[1m�[94m|�[0m           image: ${{ matrix.image }}
�[1m�[94m640�[0m �[1m�[94m|�[0m �[1m�[94m|�[0m           github-token: ${{ secrets.GITHUB_TOKEN }}
    �[1m�[94m|�[0m �[1m�[94m|____________________________________________________-�[0m �[1m�[94mthis step�[0m
    �[1m�[94m|�[0m
    �[1m�[94m= �[0m�[1mnote�[0m: audit confidence → High
    �[1m�[94m= �[0m�[1mnote�[0m: this finding has an auto-fix
    �[1m�[94m= �[0m�[1mhelp�[0m: audit documentation → �[32mhttps://docs.zizmor.sh/audits/#self-repository�[39m

�[1m�[96mhelp[self-repository]�[0m�[1m: use GitHub's dedicated self-repository syntax�[0m
   �[1m�[94m--> �[0m/github/workspace/.github/workflows/prune-pull-requests-images-tags.yml:161:15
    �[1m�[94m|�[0m
�[1m�[94m160�[0m �[1m�[94m|�[0m       - id: build
    �[1m�[94m|�[0m         �[1m�[94m---------�[0m �[1m�[94mthis step�[0m
�[1m�[94m161�[0m �[1m�[94m|�[0m         uses: ./../self-workflow/actions/docker/prune-pull-requests-image-tags
    �[1m�[94m|�[0m               �[1m�[96m^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^�[0m �[1m�[96muse '$/...' instead of './...'�[0m
    �[1m�[94m|�[0m
    �[1m�[94m= �[0m�[1mnote�[0m: audit confidence → High
    �[1m�[94m= �[0m�[1mnote�[0m: this finding has an auto-fix
    �[1m�[94m= �[0m�[1mhelp�[0m: audit documentation → �[32mhttps://docs.zizmor.sh/audits/#self-repository�[39m

�[1m�[96mhelp[self-repository]�[0m�[1m: use GitHub's dedicated self-repository syntax�[0m
   �[1m�[94m--> �[0m/github/workspace/actions/docker/build-image/action.yml:164:13
    �[1m�[94m|�[0m
�[1m�[94m163�[0m �[1m�[94m|�[0m     - id: docker-setup
    �[1m�[94m|�[0m       �[1m�[94m----------------�[0m �[1m�[94mthis step�[0m
�[1m�[94m164�[0m �[1m�[94m|�[0m       uses: ./../self-actions/docker/setup
    �[1m�[94m|�[0m             �[1m�[96m^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^�[0m �[1m�[96muse '$/...' instead of './...'�[0m
    �[1m�[94m|�[0m
    �[1m�[94m= �[0m�[1mnote�[0m: audit confidence → High
    �[1m�[94m= �[0m�[1mnote�[0m: this finding has an auto-fix
    �[1m�[94m= �[0m�[1mhelp�[0m: audit documentation → �[32mhttps://docs.zizmor.sh/audits/#self-repository�[39m

�[1m�[96mhelp[self-repository]�[0m�[1m: use GitHub's dedicated self-repository syntax�[0m
   �[1m�[94m--> �[0m/github/workspace/actions/docker/build-image/action.yml:172:13
    �[1m�[94m|�[0m
�[1m�[94m171�[0m �[1m�[94m|�[0m     - id: metadata
    �[1m�[94m|�[0m       �[1m�[94m------------�[0m �[1m�[94mthis step�[0m
�[1m�[94m172�[0m �[1m�[94m|�[0m       uses: ./../self-actions/docker/get-image-metadata
    �[1m�[94m|�[0m             �[1m�[96m^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^�[0m �[1m�[96muse '$/...' instead of './...'�[0m
    �[1m�[94m|�[0m
    �[1m�[94m= �[0m�[1mnote�[0m: audit confidence → High
    �[1m�[94m= �[0m�[1mnote�[0m: this finding has an auto-fix
    �[1m�[94m= �[0m�[1mhelp�[0m: audit documentation → �[32mhttps://docs.zizmor.sh/audits/#self-repository�[39m

�[1m�[96mhelp[self-repository]�[0m�[1m: use GitHub's dedicated self-repository syntax�[0m
   �[1m�[94m--> �[0m/github/workspace/actions/docker/build-image/action.yml:371:13
    �[1m�[94m|�[0m
�[1m�[94m368�[0m �[1m�[94m|�[0m     - id: build
    �[1m�[94m|�[0m       �[1m�[94m---------�[0m �[1m�[94mthis step�[0m
�[1m�[94m...�[0m
�[1m�[94m371�[0m �[1m�[94m|�[0m       uses: ./../self-actions/docker/build-image/internal
    �[1m�[94m|�[0m             �[1m�[96m^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^�[0m �[1m�[96muse '$/...' instead of './...'�[0m
    �[1m�[94m|�[0m
    �[1m�[94m= �[0m�[1mnote�[0m: audit confidence → High
    �[1m�[94m= �[0m�[1mnote�[0m: this finding has an auto-fix
    �[1m�[94m= �[0m�[1mhelp�[0m: audit documentation → �[32mhttps://docs.zizmor.sh/audits/#self-repository�[39m

�[1m�[96mhelp[self-repository]�[0m�[1m: use GitHub's dedicated self-repository syntax�[0m
   �[1m�[94m--> �[0m/github/workspace/actions/helm/release-chart/action.yml:191:13
    �[1m�[94m|�[0m
�[1m�[94m191�[0m �[1m�[94m|�[0m       - uses: ./../self-actions-release-chart/helm/update-chart-values
    �[1m�[94m|�[0m         �[1m�[94m-�[0m     �[1m�[96m^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^�[0m �[1m�[96muse '$/...' instead of './...'�[0m
    �[1m�[94m|�[0m �[1m�[94m _______|�[0m
    �[1m�[94m|�[0m �[1m�[94m|�[0m
�[1m�[94m192�[0m �[1m�[94m|�[0m �[1m�[94m|�[0m       with:
�[1m�[94m193�[0m �[1m�[94m|�[0m �[1m�[94m|�[0m         path: ${{ inputs.path }}
�[1m�[94m194�[0m �[1m�[94m|�[0m �[1m�[94m|�[0m         values: ${{ steps.chart-tag-updates.outputs.values }}
    �[1m�[94m|�[0m �[1m�[94m|_____________________________________________________________-�[0m �[1m�[94mthis step�[0m
    �[1m�[94m|�[0m
    �[1m�[94m= �[0m�[1mnote�[0m: audit confidence → High
    �[1m�[94m= �[0m�[1mnote�[0m: this finding has an auto-fix
    �[1m�[94m= �[0m�[1mhelp�[0m: audit documentation → �[32mhttps://docs.zizmor.sh/audits/#self-repository�[39m

�[1m�[96mhelp[self-repository]�[0m�[1m: use GitHub's dedicated self-repository syntax�[0m
   �[1m�[94m--> �[0m/github/workspace/actions/helm/release-chart/action.yml:298:13
    �[1m�[94m|�[0m
�[1m�[94m297�[0m �[1m�[94m|�[0m     - name: Prepare chart dependencies
    �[1m�[94m|�[0m       �[1m�[94m--------------------------------�[0m �[1m�[94mthis step�[0m
�[1m�[94m298�[0m �[1m�[94m|�[0m       uses: ./../self-actions-release-chart/helm/prepare-chart
    �[1m�[94m|�[0m             �[1m�[96m^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^�[0m �[1m�[96muse '$/...' instead of './...'�[0m
    �[1m�[94m|�[0m
    �[1m�[94m= �[0m�[1mnote�[0m: audit confidence → High
    �[1m�[94m= �[0m�[1mnote�[0m: this finding has an auto-fix
    �[1m�[94m= �[0m�[1mhelp�[0m: audit documentation → �[32mhttps://docs.zizmor.sh/audits/#self-repository�[39m

�[1m�[96mhelp[self-repository]�[0m�[1m: use GitHub's dedicated self-repository syntax�[0m
   �[1m�[94m--> �[0m/github/workspace/actions/helm/release-chart/action.yml:366:13
    �[1m�[94m|�[0m
�[1m�[94m364�[0m �[1m�[94m|�[0m     - name: Sign chart digest
    �[1m�[94m|�[0m       �[1m�[94m-----------------------�[0m �[1m�[94mthis step�[0m
�[1m�[94m365�[0m �[1m�[94m|�[0m       if: inputs.sign == 'true'
�[1m�[94m366�[0m �[1m�[94m|�[0m       uses: ./../self-actions-release-chart/helm/sign-chart
    �[1m�[94m|�[0m             �[1m�[96m^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^�[0m �[1m�[96muse '$/...' instead of './...'�[0m
    �[1m�[94m|�[0m
    �[1m�[94m= �[0m�[1mnote�[0m: audit confidence → High
    �[1m�[94m= �[0m�[1mnote�[0m: this finding has an auto-fix
    �[1m�[94m= �[0m�[1mhelp�[0m: audit documentation → �[32mhttps://docs.zizmor.sh/audits/#self-repository�[39m

�[32m62�[39m findings (�[1m�[93m30�[39m suppressed, �[91m32�[39m unsafe fixes�[0m): �[35m0�[39m informational, �[36m32�[39m low, �[33m0�[39m medium, �[31m0�[39m high�[32m INFO�[0m �[2mzizmor�[0m�[2m:�[0m 🌈 zizmor v1.30.1
�[32m INFO�[0m �[1maudit�[0m�[2m:�[0m �[2mzizmor�[0m�[2m:�[0m 🌈 completed /github/workspace/.github/workflows/__greetings.yml
�[32m INFO�[0m �[1maudit�[0m�[2m:�[0m �[2mzizmor�[0m�[2m:�[0m 🌈 completed /github/workspace/.github/workflows/__main-ci.yml
�[32m INFO�[0m �[1maudit�[0m�[2m:�[0m �[2mzizmor�[0m�[2m:�[0m 🌈 completed /github/workspace/.github/workflows/__need-fix-to-issue.yml
�[32m INFO�[0m �[1maudit�[0m�[2m:�[0m �[2mzizmor�[0m�[2m:�[0m 🌈 completed /github/workspace/.github/workflows/__renovate.yml
�[32m INFO�[0m �[1maudit�[0m�[2m:�[0m �[2mzizmor�[0m�[2m:�[0m 🌈 completed /github/workspace/.github/workflows/__semantic-pull-request.yml
�[32m INFO�[0m �[1maudit�[0m�[2m:�[0m �[2mzizmor�[0m�[2m:�[0m 🌈 completed /github/workspace/.github/workflows/__shared-ci.yml
�[32m INFO�[0m �[1maudit�[0m�[2m:�[0m �[2mzizmor�[0m�[2m:�[0m 🌈 completed /github/workspace/.github/workflows/__stale.yml
�[32m INFO�[0m �[1maudit�[0m�[2m:�[0m �[2mzizmor�[0m�[2m:�[0m 🌈 completed /github/workspace/.github/workflows/docker-build-images.yml
�[32m INFO�[0m �[1maudit�[0m�[2m:�[0m �[2mzizmor�[0m�[2m:�[0m 🌈 completed /github/workspace/.github/workflows/prune-pull-requests-images-tags.yml
�[32m INFO�[0m �[1maudit�[0m�[2m:�[0m �[2mzizmor�[0m�[2m:�[0m 🌈 completed /github/workspace/actions/docker/build-image/action.yml
�[32m INFO�[0m �[1maudit�[0m�[2m:�[0m �[2mzizmor�[0m�[2m:�[0m 🌈 completed /github/workspace/actions/helm/generate-docs/action.yml
�[32m INFO�[0m �[1maudit�[0m�[2m:�[0m �[2mzizmor�[0m�[2m:�[0m 🌈 completed /github/workspace/actions/helm/release-chart/action.yml
�[32m INFO�[0m �[1maudit�[0m�[2m:�[0m �[2mzizmor�[0m�[2m:�[0m 🌈 completed /github/workspace/actions/helm/update-chart-values/action.yml
TRIVY 

Report Summary

┌─────────────────────────────────────────────────────────────────────────────────┬────────────┬─────────────────┬───────────────────┬─────────┐
│                                     Target                                      │    Type    │ Vulnerabilities │ Misconfigurations │ Secrets │
├─────────────────────────────────────────────────────────────────────────────────┼────────────┼─────────────────┼───────────────────┼─────────┤
│ actions/helm/generate-docs/package-lock.json                                    │    npm     │        6        │         -         │    -    │
├─────────────────────────────────────────────────────────────────────────────────┼────────────┼─────────────────┼───────────────────┼─────────┤
│ actions/helm/release-chart/package-lock.json                                    │    npm     │        0        │         -         │    -    │
├─────────────────────────────────────────────────────────────────────────────────┼────────────┼─────────────────┼───────────────────┼─────────┤
│ tests/charts/package-lock.json                                                  │    npm     │        0        │         -         │    -    │
├─────────────────────────────────────────────────────────────────────────────────┼────────────┼─────────────────┼───────────────────┼─────────┤
│ Dockerfile                                                                      │ dockerfile │        -        │         0         │    -    │
├─────────────────────────────────────────────────────────────────────────────────┼────────────┼─────────────────┼───────────────────┼─────────┤
│ tests/application/Dockerfile                                                    │ dockerfile │        -        │         0         │    -    │
├─────────────────────────────────────────────────────────────────────────────────┼────────────┼─────────────────┼───────────────────┼─────────┤
│ tests/charts/application/templates/configmap.tpl                                │    helm    │        -        │         0         │    -    │
├─────────────────────────────────────────────────────────────────────────────────┼────────────┼─────────────────┼───────────────────┼─────────┤
│ tests/charts/application/templates/deployment.tpl                               │    helm    │        -        │         0         │    -    │
├─────────────────────────────────────────────────────────────────────────────────┼────────────┼─────────────────┼───────────────────┼─────────┤
│ tests/charts/application/templates/networkpolicy.tpl                            │    helm    │        -        │         0         │    -    │
├─────────────────────────────────────────────────────────────────────────────────┼────────────┼─────────────────┼───────────────────┼─────────┤
│ tests/charts/application/templates/service.tpl                                  │    helm    │        -        │         0         │    -    │
├─────────────────────────────────────────────────────────────────────────────────┼────────────┼─────────────────┼───────────────────┼─────────┤
│ tests/charts/application/templates/serviceaccount.tpl                           │    helm    │        -        │         0         │    -    │
├─────────────────────────────────────────────────────────────────────────────────┼────────────┼─────────────────┼───────────────────┼─────────┤
│ tests/charts/umbrella-application/charts/app/templates/configmap.tpl            │    helm    │        -        │         0         │    -    │
├─────────────────────────────────────────────────────────────────────────────────┼────────────┼─────────────────┼───────────────────┼─────────┤
│ tests/charts/umbrella-application/charts/app/templates/deployment.tpl           │    helm    │        -        │         0         │    -    │
├─────────────────────────────────────────────────────────────────────────────────┼────────────┼─────────────────┼───────────────────┼─────────┤
│ tests/charts/umbrella-application/charts/app/templates/networkpolicy.tpl        │    helm    │        -        │         0         │    -    │
├─────────────────────────────────────────────────────────────────────────────────┼────────────┼─────────────────┼───────────────────┼─────────┤
│ tests/charts/umbrella-application/charts/app/templates/service.tpl              │    helm    │        -        │         0         │    -    │
├─────────────────────────────────────────────────────────────────────────────────┼────────────┼─────────────────┼───────────────────┼─────────┤
│ tests/charts/umbrella-application/charts/app/templates/serviceaccount.tpl       │    helm    │        -        │         0         │    -    │
├─────────────────────────────────────────────────────────────────────────────────┼────────────┼─────────────────┼───────────────────┼─────────┤
│ tests/charts/umbrella-application/charts/database/templates/deploy_valkey.yaml  │    helm    │        -        │         0         │    -    │
├─────────────────────────────────────────────────────────────────────────────────┼────────────┼─────────────────┼───────────────────┼─────────┤
│ tests/charts/umbrella-application/charts/database/templates/init_config.yaml    │    helm    │        -        │         0         │    -    │
├─────────────────────────────────────────────────────────────────────────────────┼────────────┼─────────────────┼───────────────────┼─────────┤
│ tests/charts/umbrella-application/charts/database/templates/netpolicy.yaml      │    helm    │        -        │         0         │    -    │
├─────────────────────────────────────────────────────────────────────────────────┼────────────┼─────────────────┼───────────────────┼─────────┤
│ tests/charts/umbrella-application/charts/database/templates/service.yaml        │    helm    │        -        │         0         │    -    │
├─────────────────────────────────────────────────────────────────────────────────┼────────────┼─────────────────┼───────────────────┼─────────┤
│ tests/charts/umbrella-application/charts/database/templates/serviceaccount.yaml │    helm    │        -        │         0         │    -    │
├─────────────────────────────────────────────────────────────────────────────────┼────────────┼─────────────────┼───────────────────┼─────────┤
│ tests/charts/umbrella-application/templates/database-custom-config.tpl          │    helm    │        -        │         0         │    -    │
└─────────────────────────────────────────────────────────────────────────────────┴────────────┴─────────────────┴───────────────────┴─────────┘
Legend:
- '-': Not scanned
- '0': Clean (no security findings detected)


For OSS Maintainers: VEX Notice
--------------------------------
If you're an OSS maintainer and Trivy has detected vulnerabilities in your project that you believe are not actually exploitable, consider issuing a VEX (Vulnerability Exploitability eXchange) statement.
VEX allows you to communicate the actual status of vulnerabilities in your project, improving security transparency and reducing false positives for your users.
Learn more and start using VEX: https://trivy.dev/docs/v0.74/guide/supply-chain/vex/repo#publishing-vex-documents

To disable this notice, set the TRIVY_DISABLE_VEX_NOTICE environment variable.


actions/helm/generate-docs/package-lock.json (npm)
==================================================
Total: 6 (UNKNOWN: 0, LOW: 1, MEDIUM: 1, HIGH: 4, CRITICAL: 0)

┌──────────────────────────────┬─────────────────┬──────────┬────────┬───────────────────┬────────────────┬──────────────────────────────────────────────────────────────┐
│           Library            │  Vulnerability  │ Severity │ Status │ Installed Version │ Fixed Version  │                            Title                             │
├──────────────────────────────┼─────────────────┼──────────┼────────┼───────────────────┼────────────────┼──────────────────────────────────────────────────────────────┤
│ @modelcontextprotocol/server │ CVE-2026-111768 │ HIGH     │ fixed  │ 2.0.0             │ 2.3.0          │ MCP TypeScript SDK: One HTTP request within the default size │
│                              │                 │          │        │                   │                │ limit could...                                               │
│                              │                 │          │        │                   │                │ https://avd.aquasec.com/nvd/cve-2026-111768                  │
│                              ├─────────────────┤          │        │                   │                ├──────────────────────────────────────────────────────────────┤
│                              │ CVE-2026-111770 │          │        │                   │                │ MCP TypeScript server SDK: Shared transport or server        │
│                              │                 │          │        │                   │                │ instances delivered one...                                   │
│                              │                 │          │        │                   │                │ https://avd.aquasec.com/nvd/cve-2026-111770                  │
│                              ├─────────────────┼──────────┤        │                   │                ├──────────────────────────────────────────────────────────────┤
│                              │ CVE-2026-111771 │ MEDIUM   │        │                   │                │ MCP TypeScript SDK: Server bearer authentication accepted    │
│                              │                 │          │        │                   │                │ tokens issued for another service...                         │
│                              │                 │          │        │                   │                │ https://avd.aquasec.com/nvd/cve-2026-111771                  │
├──────────────────────────────┼─────────────────┼──────────┤        ├───────────────────┼────────────────┼──────────────────────────────────────────────────────────────┤
│ markdown-it                  │ CVE-2026-111758 │ HIGH     │        │ 15.0.1            │ 14.3.3, 15.0.3 │ markdown-it: markdown-it: Denial of Service via unclosed     │
│                              │                 │          │        │                   │                │ link reference definitions                                   │
│                              │                 │          │        │                   │                │ https://avd.aquasec.com/nvd/cve-2026-111758                  │
│                              ├─────────────────┤          │        │                   ├────────────────┼──────────────────────────────────────────────────────────────┤
│                              │ CVE-2026-111759 │          │        │                   │ 15.0.2, 14.3.2 │ markdown-it: markdown-it: Denial of Service via mismatched   │
│                              │                 │          │        │                   │                │ quote parsing                                                │
│                              │                 │          │        │                   │                │ https://avd.aquasec.com/nvd/cve-2026-111759                  │
│                              ├─────────────────┼──────────┤        │                   ├────────────────┼──────────────────────────────────────────────────────────────┤
│                              │ CVE-2026-111766 │ LOW      │        │                   │ 14.3.3, 15.0.3 │ markdown-it: markdown-it: Denial of Service via repeated     │
│                              │                 │          │        │                   │                │ unterminated inline HTML constructs                          │
│                              │                 │          │        │                   │                │ https://avd.aquasec.com/nvd/cve-2026-111766                  │
└──────────────────────────────┴─────────────────┴──────────┴────────┴───────────────────┴────────────────┴──────────────────────────────────────────────────────────────┘

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants