Skip to content

Actions: python/pythondotorg

Actions

GitHub Actions Security Analysis with zizmor 🌈

Actions

Loading...
Loading

Show workflow options

Create status badge

Loading
zizmor.yml
68 workflow runs
68 workflow runs

Filter by Event

⌥ + click/return to exclude

Filter by Status

⌥ + click/return to exclude

Filter by Branch

⌥ + click/return to exclude

Filter by Actor

⌥ + click/return to exclude
fix: remove |safe from striptags output in templates GitHub Actions Security Analysis with zizmor 🌈 #71: Pull request #3061 opened by hanu-14
Action required hanu-14:fix-striptags-safe
hanu-14:fix-striptags-safe
Action required
fix: remove |safe from striptags output in search templates GitHub Actions Security Analysis with zizmor 🌈 #70: Pull request #3060 opened by fazalpsinfo-cmyk
Action required fazalpsinfo-cmyk:fix/search-safe-striptags
fazalpsinfo-cmyk:fix/search-safe-striptags
Action required
fix: repair broken call-to-action link on Volunteer page (#2983) GitHub Actions Security Analysis with zizmor 🌈 #69: Pull request #3058 opened by hanu-14
Action required hanu-14:fix/volunteer-cta-link
hanu-14:fix/volunteer-cta-link
Action required
Hardening: Remove User.api_v2_token property (returns plaintext API token) GitHub Actions Security Analysis with zizmor 🌈 #68: Pull request #3057 opened by hanu-14
Action required hanu-14:fix/remove-api-v2-token
hanu-14:fix/remove-api-v2-token
Action required
chore(deps): bump django-haystack from 3.3.0 to 3.4.0 GitHub Actions Security Analysis with zizmor 🌈 #66: Pull request #3055 opened by dependabot Bot
22s dependabot/uv/django-haystack-3.4.0
dependabot/uv/django-haystack-3.4.0
22s
chore(deps): bump soupsieve from 2.8.3 to 2.8.4 (#3053) GitHub Actions Security Analysis with zizmor 🌈 #64: Commit 1e3aa05 pushed by JacobCoffee
25s main
main
25s
chore(deps): bump soupsieve from 2.8.3 to 2.8.4 GitHub Actions Security Analysis with zizmor 🌈 #63: Pull request #3053 synchronize by JacobCoffee
24s dependabot/uv/soupsieve-2.8.4
dependabot/uv/soupsieve-2.8.4
24s
chore(deps): bump astral-sh/uv from 0.11.20 to 0.11.28 (#3051) GitHub Actions Security Analysis with zizmor 🌈 #62: Commit 4a3dbc3 pushed by JacobCoffee
26s main
main
26s
chore(deps): bump idna from 3.11 to 3.15 GitHub Actions Security Analysis with zizmor 🌈 #61: Pull request #3002 synchronize by JacobCoffee
23s dependabot/uv/idna-3.15
dependabot/uv/idna-3.15
23s
chore(deps): bump soupsieve from 2.8.3 to 2.8.4 GitHub Actions Security Analysis with zizmor 🌈 #60: Pull request #3053 opened by dependabot Bot
18s dependabot/uv/soupsieve-2.8.4
dependabot/uv/soupsieve-2.8.4
18s
chore(deps): bump astral-sh/uv from 0.11.20 to 0.11.28 GitHub Actions Security Analysis with zizmor 🌈 #59: Pull request #3051 synchronize by JacobCoffee
18s dependabot/docker/astral-sh/uv-0.11.28
dependabot/docker/astral-sh/uv-0.11.28
18s
chore(deps): bump the github-actions group across 1 directory with 5 … GitHub Actions Security Analysis with zizmor 🌈 #58: Commit 8cd79a4 pushed by JacobCoffee
22s main
main
22s
chore(deps): bump astral-sh/uv from 0.11.20 to 0.11.28 GitHub Actions Security Analysis with zizmor 🌈 #56: Pull request #3051 opened by dependabot Bot
24s dependabot/docker/astral-sh/uv-0.11.28
dependabot/docker/astral-sh/uv-0.11.28
24s
chore(deps): bump the github-actions group across 1 directory with 5 updates GitHub Actions Security Analysis with zizmor 🌈 #55: Pull request #3050 opened by dependabot Bot
1m 10s dependabot/github_actions/github-actions-c0b2850dc7
dependabot/github_actions/github-actions-c0b2850dc7
1m 10s
Fix: Correct broken link to contributing guide in README GitHub Actions Security Analysis with zizmor 🌈 #54: Pull request #3049 opened by SksatoshiKaito
Action required SksatoshiKaito:fix-readme-link
SksatoshiKaito:fix-readme-link
Action required
Don't mark striptags output as safe in search results GitHub Actions Security Analysis with zizmor 🌈 #53: Pull request #3048 opened by apoorva-01
25s apoorva-01:search-description-escape-safe
apoorva-01:search-description-escape-safe
25s
Harden sponsors admin actions: require change permission and make loc… GitHub Actions Security Analysis with zizmor 🌈 #52: Commit d907160 pushed by JacobCoffee
18s main
main
18s
Restrict nomination edits to editable windows GitHub Actions Security Analysis with zizmor 🌈 #51: Pull request #2992 synchronize by vandit98
20s vandit98:vandit98/2991-nomination-edit-permissions
vandit98:vandit98/2991-nomination-edit-permissions
20s
Restrict nomination edits to editable windows GitHub Actions Security Analysis with zizmor 🌈 #50: Pull request #2992 synchronize by vandit98
Action required vandit98:vandit98/2991-nomination-edit-permissions
vandit98:vandit98/2991-nomination-edit-permissions
Action required
Harden sponsors admin actions: require change permission and make lock POST-only GitHub Actions Security Analysis with zizmor 🌈 #49: Pull request #3035 synchronize by JacobCoffee
24s tonghuaroot:harden-sponsors-admin-actions
tonghuaroot:harden-sponsors-admin-actions
24s
chore(deps): bump starlette from 0.52.1 to 1.3.1 (#3028) GitHub Actions Security Analysis with zizmor 🌈 #48: Commit 8507d95 pushed by JacobCoffee
12s main
main
12s
chore(deps): bump starlette from 0.52.1 to 1.3.1 GitHub Actions Security Analysis with zizmor 🌈 #47: Pull request #3028 synchronize by JacobCoffee
26s dependabot/uv/starlette-1.3.1
dependabot/uv/starlette-1.3.1
26s
Restrict nomination edits to editable windows GitHub Actions Security Analysis with zizmor 🌈 #46: Pull request #2992 synchronize by JacobCoffee
20s vandit98:vandit98/2991-nomination-edit-permissions
vandit98:vandit98/2991-nomination-edit-permissions
20s
Add a Content-Security-Policy in Report-Only mode (refs #3041) GitHub Actions Security Analysis with zizmor 🌈 #45: Pull request #3042 synchronize by tonghuaroot
Action required tonghuaroot:csp-report-only
tonghuaroot:csp-report-only
Action required
Add a Content-Security-Policy in Report-Only mode (refs #3041) GitHub Actions Security Analysis with zizmor 🌈 #44: Pull request #3042 opened by tonghuaroot
Action required tonghuaroot:csp-report-only
tonghuaroot:csp-report-only
Action required