v0.5.6

Compare Source

• 1.25.2 is now available via the action
• 1.25.2 is now the default version of zizmor used by the action

v0.5.5

Compare Source

This is a no-op release.

v0.5.4

Compare Source

• 1.25.0 is now available via the action
• 1.25.0 is now the default version of zizmor used by the action

v0.5.3

Compare Source

What's Changed

• 1.24.0 and 1.24.1 are now available via the action
• 1.24.1 is now the default version of zizmor used by the action

Full Changelog: zizmorcore/zizmor-action@v0.5.2...v0.5.3

v0.5.2

Compare Source

What's Changed

• zizmor 1.23.1 is now the default used by this action.

Full Changelog: zizmorcore/zizmor-action@v0.5.1...v0.5.2

v0.5.1

Compare Source

What's Changed

• zizmor 1.23.0 is now the default used by this action.

Full Changelog: zizmorcore/zizmor-action@v0.5.0...v0.5.1

v0.5.0

Compare Source

What's Changed

• Expose output-file as an output when advanced-security: true by @​unlobito in #​87

New Contributors

• @​unlobito made their first contribution in #​87

Full Changelog: zizmorcore/zizmor-action@v0.4.1...v0.5.0

v0.4.1

Compare Source

This version fixes an error in the 0.4.0 release that prevented non-relative use
of the action.

What's Changed

• Fix version file path by @​woodruffw in #​83

Full Changelog: zizmorcore/zizmor-action@v0.4.0...v0.4.1

v0.4.0

Compare Source

This new version of zizmor-action brings two major changes:

• The new fail-on-no-inputs option can be used to control whether
  zizmor-action fails if no inputs were collected by zizmor. The default
  remains true, reflecting the pre-existing behavior.

• The action's use of the official zizmor Docker images is now fully
  hash-checked internally, preventing accidental or malicious modification
  to the images. This also means that subsequent releases of zizmor
  will induce a release of this action, rather than the action always picking
  up the latest version by default.

What's Changed

• docs: extended permissions required for internal repos by @​AntoineSebert in #​61
• docs: clarify description of "token" to indicate it is only used for online audits by @​rmuir in #​63
• Hash-check zizmor Docker images by @​woodruffw in #​68
• Add fail-on-no-inputs option by @​woodruffw in #​67

New Contributors

• @​AntoineSebert made their first contribution in #​61
• @​rmuir made their first contribution in #​63

Full Changelog: zizmorcore/zizmor-action@v0.3.0...v0.4.0