Merge pull request #264 from crazy-max/zizmor-fixes

ci: restrict update-dist GitHub App token scope
2026-05-26 00:10:25 -05:00 · 2026-05-21 14:58:38 +02:00 · 2026-05-21 14:30:10 +02:00 · 2026-04-24 16:52:32 +02:00 · 2026-04-24 15:38:03 +02:00
2 changed files with 10 additions and 8 deletions
@@ -32,7 +32,7 @@ jobs:
        os:
          - ubuntu-latest
          - ubuntu-24.04-arm
-          - macos-15-intel
+          - macos-26-large
          - windows-latest
        version:
          - ""
@@ -56,7 +56,7 @@ jobs:
        os:
          - ubuntu-latest
          - ubuntu-24.04-arm
-          - macos-15-intel
+          - macos-26-large
          - windows-latest
    steps:
      -
@@ -77,7 +77,7 @@ jobs:
        os:
          - ubuntu-latest
          - ubuntu-24.04-arm
-          - macos-15-intel
+          - macos-26-large
          - windows-latest
    steps:
      -
@@ -104,7 +104,7 @@ jobs:
        os:
          - ubuntu-latest
          - ubuntu-24.04-arm
-          - macos-15-intel
+          - macos-26-large
          - windows-latest
    steps:
      -
@@ -122,7 +122,7 @@ jobs:
          docker context inspect foo

  lima-start-args:
-    runs-on: macos-15-intel
+    runs-on: macos-26-large
    steps:
      -
        name: Checkout
@@ -186,7 +186,7 @@ jobs:
      fail-fast: false
      matrix:
        os:
-          - macos-15-intel
+          - macos-26-large
    steps:
      -
        name: Checkout
@@ -282,7 +282,7 @@ jobs:
        os:
          - ubuntu-latest
          - ubuntu-24.04-arm
-          - macos-15-intel
+          - macos-26-large
          - windows-latest
    steps:
      -
@@ -333,7 +333,7 @@ jobs:
      matrix:
        os:
          - ubuntu-latest
-          - macos-15-intel
+          - macos-26-large
          - windows-latest
    steps:
      -
@@ -26,6 +26,8 @@ jobs:
          app-id: ${{ secrets.GHACTIONS_REPO_WRITE_APP_ID }}
          private-key: ${{ secrets.GHACTIONS_REPO_WRITE_APP_PRIVATE_KEY }}
          owner: docker
+          repositories: setup-docker-action
+          permission-contents: write
      -
        name: Checkout
        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
Author	SHA1	Message	Date
CrazyMax	328f2e0797	Merge pull request #264 from crazy-max/zizmor-fixes ci: restrict update-dist GitHub App token scope	2026-05-21 14:58:38 +02:00
CrazyMax	9360424f67	ci: restrict update-dist GitHub App token scope Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>	2026-05-21 14:30:10 +02:00
Paweł Gronowski	f6ea87cae1	Merge pull request #253 from crazy-max/ci-bump-macos ci: update macos runners to 26	2026-04-24 16:52:32 +02:00
CrazyMax	b7bb222773	ci: update macos runners to 26 Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>	2026-04-24 15:38:03 +02:00