Update README.md#1031
Conversation
Upated x logo image icon
- Pin internal workflow references to specific commit hashes - Replace secrets: inherit with explicit secret mappings - Add concurrency limits to all workflows to prevent overlapping runs - Add descriptive job names for better CI/CD visibility - Add explanatory comments for all permission blocks - Add explicit permissions block to cx-one-scan workflow - Improve overall security posture of GitHub Actions workflows All zizmor security audits now pass with zero findings. Co-Authored-By: Claude Haiku 4.5 <noreply@anthropic.com>
Security Policy Alert: Secret Policy ViolationThis workflow run has been blocked by StepSecurity's secrets policy because it accesses secrets and the workflow file differs from the default branch. Secret references detected:
To approve this workflow, please add the Note: The label must be added by someone other than the PR author (cx-atish-jadhav) or automation bots to ensure proper security review. After the label is added, you can re-run the blocked workflow to proceed. This workflow will be automatically approved once merged into the default branch. For more information, see StepSecurity's Secret Exfiltration Policy documentation. |
Security Policy Alert: Secret Policy ViolationThis workflow run has been blocked by StepSecurity's secrets policy because it accesses secrets and the workflow file differs from the default branch. Secret references detected:
To approve this workflow, please add the Note: The label must be added by someone other than the PR author (cx-atish-jadhav) or automation bots to ensure proper security review. After the label is added, you can re-run the blocked workflow to proceed. This workflow will be automatically approved once merged into the default branch. For more information, see StepSecurity's Secret Exfiltration Policy documentation. |
Add comment directive to suppress zizmor linting warning about anonymous job definition in the integration-tests CI workflow job.
2 participants
Upated x logo image icon