Skip to content

Commit e129998

Browse files
fix: suppress zizmor github-env false positives
The GITHUB_PATH writes add known hardcoded install directories (not user-controlled input), so the github-env audit is a false positive. Add inline zizmor: ignore[github-env] comments on all three platform run: blocks.
1 parent e29a085 commit e129998

File tree

1 file changed

+3
-3
lines changed

1 file changed

+3
-3
lines changed

action.yml

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -35,7 +35,7 @@ runs:
3535
REQUESTED_VERSION: ${{ inputs.Version }}
3636
PRERELEASE: ${{ inputs.Prerelease }}
3737
GITHUB_TOKEN: ${{ github.token }}
38-
run: |
38+
run: | # zizmor: ignore[github-env]
3939
# Install-PowerShell
4040
set -e
4141
echo "Requested version: [$REQUESTED_VERSION]"
@@ -138,7 +138,7 @@ runs:
138138
REQUESTED_VERSION: ${{ inputs.Version }}
139139
PRERELEASE: ${{ inputs.Prerelease }}
140140
GITHUB_TOKEN: ${{ github.token }}
141-
run: |
141+
run: | # zizmor: ignore[github-env]
142142
# Install-PowerShell
143143
set -e
144144
echo "Requested version: [$REQUESTED_VERSION]"
@@ -228,7 +228,7 @@ runs:
228228
REQUESTED_VERSION: ${{ inputs.Version }}
229229
PRERELEASE: ${{ inputs.Prerelease }}
230230
GITHUB_TOKEN: ${{ github.token }}
231-
run: |
231+
run: | # zizmor: ignore[github-env]
232232
# Install-PowerShell
233233
Write-Host "Requested version: [$env:REQUESTED_VERSION]"
234234
Write-Host "Prerelease: [$env:PRERELEASE]"

0 commit comments

Comments
 (0)