prometheus

0 Fork 0

mirror of https://github.com/prometheus/prometheus.git synced 2026-10-28 18:59:35 +08:00

Files

T

History

Arve Knudsen d6851c4033 ci: ignore zizmor cache-poisoning in synced golangci-lint workflow (#20158 )

The synced zizmor workflow reports cache-poisoning for the synced
golangci-lint workflow in every Go repository, because the workflow runs
on tag and release branch pushes and actions/setup-go caches by default.
zizmor here only scans .github/workflows, so it never checks
scripts/golangci-lint.yml.

Restoring the Go cache is acceptable in this workflow: its token is
read-only, it uses no secrets and it publishes nothing. Ignore the
finding for this step rather than disabling the cache. This differs from
the golangci job in ci.yml, which disables the cache since d5f79f751,
because that job runs in the same workflow as the publish jobs.

Signed-off-by: Arve Knudsen <arve.knudsen@gmail.com>

2026-10-23 11:33:28 +02:00

bump_go_version.sh

chore: adjust bump_go_version.sh (#19278 )

2026-08-06 11:07:46 +02:00

check_release_notes.sh

feat: add a way to pass release notes from the PR (#16904 )

2025-08-13 15:34:36 +02:00

check-go-mod-version.sh

ci: derive the oldest supported Go version dynamically

2026-08-21 15:43:00 +02:00

check-node-version.sh

chore: add Makefile target to check Node.js version (#16832 )