René's URL Explorer Experiment

{"@context":"https://schema.org","@type":"DiscussionForumPosting","headline":"address zizmor findings in GitHub Actions","articleBody":"```\nwarning[artipacked]: credential persistence through GitHub Actions artifacts\n  --\u003e .github/workflows/CI-unixish.yml:20:7\n   |\n20 |     - uses: actions/checkout@v4\n   |       ------------------------- does not set persist-credentials: false\n   |\n   = note: audit confidence → Low\n   = note: this finding has an auto-fix\n\nwarning[excessive-permissions]: overly broad permissions\n   --\u003e .github/workflows/CI-unixish.yml:6:3\n    |\n  6 | /   build:\n  7 | |\n...   |\n111 | |         make clean\n112 | |         make -j$(nproc) test selfcheck CXXFLAGS=\"-O2 -g3 -stdlib=libc++ -fsanitize=memory\" LDFLAGS=\"-lc++ -fsanitize=memory\"\n    | |                                                                                                                             -\n    | |_____________________________________________________________________________________________________________________________|\n    |                                                                                                                               this job\n    |                                                                                                                               default permissions used due to no permissions: block\n    |\n    = note: audit confidence → Medium\n\nwarning[artipacked]: credential persistence through GitHub Actions artifacts\n  --\u003e .github/workflows/CI-windows.yml:25:9\n   |\n25 |       - uses: actions/checkout@v4\n   |         ------------------------- does not set persist-credentials: false\n   |\n   = note: audit confidence → Low\n   = note: this finding has an auto-fix\n\nwarning[excessive-permissions]: overly broad permissions\n  --\u003e .github/workflows/CI-windows.yml:15:3\n   |\n15 | /   build:\n16 | |     strategy:\n...  |\n60 | |           python -m pytest integration_test.py -vv || exit /b !errorlevel!\n61 | |\n   | |         -\n   | |_________|\n   |           this job\n   |           default permissions used due to no permissions: block\n   |\n   = note: audit confidence → Medium\n\nwarning[artipacked]: credential persistence through GitHub Actions artifacts\n  --\u003e .github/workflows/clang-tidy.yml:13:9\n   |\n13 |       - uses: actions/checkout@v4\n   |         ------------------------- does not set persist-credentials: false\n   |\n   = note: audit confidence → Low\n   = note: this finding has an auto-fix\n\nwarning[excessive-permissions]: overly broad permissions\n  --\u003e .github/workflows/clang-tidy.yml:8:3\n   |\n 8 | /   build:\n 9 | |\n...  |\n38 | |         run: |\n39 | |           run-clang-tidy-20 -q -j $(nproc) -p=cmake.output\n   | |                                                           -\n   | |___________________________________________________________|\n   |                                                             this job\n   |                                                             default permissions used due to no permissions: block\n   |\n   = note: audit confidence → Medium\n```","author":{"url":"https://github.com/firewave","@type":"Person","name":"firewave"},"datePublished":"2025-08-06T13:21:23.000Z","interactionStatistic":{"@type":"InteractionCounter","interactionType":"https://schema.org/CommentAction","userInteractionCount":0},"url":"https://github.com/485/simplecpp/issues/485"}