noel/supplychain
Watch
1
0
Fork
You've already forked supplychain
 0
Code Issues Pull requests 1 Projects Releases Packages Wiki Activity

fix(workflows): scan Forgejo definitions #1

Open
noel wants to merge 1 commit from fix/forgejo-workflow-discovery-1714 into main
pull from: fix/forgejo-workflow-discovery-1714
merge into: noel:main
Conversation 0 Commits 1 Files changed 5 +9 -7
noel commented 2026-08-17 01:36:05 +00:00
Owner
Copy link

Relates codewire/codewire#1714

Adds native .forgejo/workflows discovery to the published scanner so Forgejo-root consumers receive the same offline zizmor audit as GitHub and Gitea definitions.

Scope is intentionally limited to path discovery, regression coverage, and user-facing scanner descriptions. Scanner policy and pinned helper versions are unchanged.

Verification: make test (full race-enabled Go suite), focused workflow/cmd tests, formatting, and diff checks.

Relates codewire/codewire#1714 Adds native `.forgejo/workflows` discovery to the published scanner so Forgejo-root consumers receive the same offline zizmor audit as GitHub and Gitea definitions. Scope is intentionally limited to path discovery, regression coverage, and user-facing scanner descriptions. Scanner policy and pinned helper versions are unchanged. Verification: `make test` (full race-enabled Go suite), focused workflow/cmd tests, formatting, and diff checks.
This pull request can be merged automatically.
This branch is out-of-date with the base branch
You are not authorized to merge this pull request.
View command line instructions

Checkout

From your project repository, check out a new branch and test the changes.
git fetch -u origin fix/forgejo-workflow-discovery-1714:fix/forgejo-workflow-discovery-1714
git switch fix/forgejo-workflow-discovery-1714

Merge

Merge the changes and update on Forgejo.

Warning: The "Autodetect manual merge" setting is not enabled for this repository, you will have to mark this pull request as manually merged afterwards.

git switch main
git merge --no-ff fix/forgejo-workflow-discovery-1714
git switch fix/forgejo-workflow-discovery-1714
git rebase main
git switch main
git merge --ff-only fix/forgejo-workflow-discovery-1714
git switch fix/forgejo-workflow-discovery-1714
git rebase main
git switch main
git merge --no-ff fix/forgejo-workflow-discovery-1714
git switch main
git merge --squash fix/forgejo-workflow-discovery-1714
git switch main
git merge --ff-only fix/forgejo-workflow-discovery-1714
git switch main
git merge fix/forgejo-workflow-discovery-1714
git push origin main
Sign in to join this conversation.
Reviewers
No reviewers
Labels
Clear labels
No items
No labels
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference
noel/supplychain!1
No description provided.