Skip to content

Update go modules#12

Merged
tomtwinkle merged 8 commits into
mainfrom
update-go-modules
Mar 9, 2026
Merged

Update go modules#12
tomtwinkle merged 8 commits into
mainfrom
update-go-modules

Conversation

@tomtwinkle

Copy link
Copy Markdown
Owner

Overview

This branch performs a maintenance upgrade of the Go toolchain, dependencies, and CI/CD workflows to bring the project up to date with the latest versions.

Changes

  • Go version bumped from 1.211.25.0 in go.mod
  • golang.org/x/text dependency upgraded from v0.14.0v0.34.0 (go.mod + go.sum)
  • GitHub Actions updated across all four workflow files (build.yaml, test.yaml, linter.yaml, codeql-analysis.yml):
    • actions/setup-go bumped to v6.3.0 (new pinned hash)
    • actions/checkout bumped to v6.0.2 (new pinned hash)
    • CI matrix Go versions changed from [1.19.x, 1.20.x, 1.21.x][1.25.x, 1.26.x]
    • Runner changed from ubuntu-latestubuntu-slim

Impact

  • No source code changes — all changes are limited to build configuration and dependencies, so runtime behavior is unchanged.
  • CI will now only validate against Go 1.25/1.26, dropping coverage for older versions (1.19–1.21).
  • The golang.org/x/text bump (20 minor versions) may include breaking API changes or behavior differences worth verifying against existing tests.

@zephyrchien

Copy link
Copy Markdown

Thank you for the great work.

I received a random Github notification which gets me reminded that I subscribed this repo. We ran into a similar issue in 2024 when trying to export utf-8 encoded CSV files in shift-jis. At that time I found your article, and decided to use this library with a little bit modifications (record replaced chars in utf-8). Really appreciate, thanks!

@github-actions

github-actions Bot commented Mar 9, 2026

Copy link
Copy Markdown

Super-linter summary

Language Validation result
BIOME_FORMAT Fail ❌
BIOME_LINT Pass ✅
CHECKOV Pass ✅
GITHUB_ACTIONS Pass ✅
GITHUB_ACTIONS_ZIZMOR Fail ❌
GITLEAKS Pass ✅
GIT_MERGE_CONFLICT_MARKERS Pass ✅
GO_MODULES Pass ✅
JSCPD Pass ✅
PRE_COMMIT Pass ✅
SPELL_CODESPELL Pass ✅
TRIVY Pass ✅
YAML Pass ✅
YAML_PRETTIER Pass ✅

Super-linter detected linting errors

For more information, see the GitHub Actions workflow run

Powered by Super-linter

BIOME_FORMAT
Checked 1 file in 2ms. No fixes applied.
Found 1 error..github/linters/.jscpd.json format ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

  × Formatter would have printed the following content:

    1 1 │   {
    2   │ - ··"threshold":·0,
    3   │ - ··"ignore":·["**/*_test.go"],
    4   │ - ··"absolute":·true
    5   │ - }
      2 │ + → "threshold":·0,
      3 │ + → "ignore":·["**/*_test.go"],
      4 │ + → "absolute":·true
      5 │ + }
      6 │ +


format ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

  × Some errors were emitted while running checks.

GITHUB_ACTIONS_ZIZMOR
�[1m�[96mhelp[artipacked]�[0m�[1m: credential persistence through GitHub Actions artifacts�[0m
  �[1m�[94m--> �[0m/github/workspace/.github/workflows/build.yaml:25:9
   �[1m�[94m|�[0m
�[1m�[94m25�[0m �[1m�[94m|�[0m         - name: Checkout Code
   �[1m�[94m|�[0m �[1m�[96m _________^�[0m
�[1m�[94m26�[0m �[1m�[94m|�[0m �[1m�[96m|�[0m         uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
   �[1m�[94m|�[0m �[1m�[96m|________________________________________________________________________________^�[0m �[1m�[96mdoes not set persist-credentials: false�[0m
   �[1m�[94m|�[0m
   �[1m�[94m= �[0m�[1mnote�[0m: audit confidence → Low
   �[1m�[94m= �[0m�[1mnote�[0m: this finding has an auto-fix
   �[1m�[94m= �[0m�[1mhelp�[0m: audit documentation → �[32mhttps://docs.zizmor.sh/audits/#artipacked�[39m

�[1m�[96mhelp[artipacked]�[0m�[1m: credential persistence through GitHub Actions artifacts�[0m
  �[1m�[94m--> �[0m/github/workspace/.github/workflows/codeql-analysis.yml:43:9
   �[1m�[94m|�[0m
�[1m�[94m43�[0m �[1m�[94m|�[0m         - name: Checkout repository
   �[1m�[94m|�[0m �[1m�[96m _________^�[0m
�[1m�[94m44�[0m �[1m�[94m|�[0m �[1m�[96m|�[0m         uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
�[1m�[94m45�[0m �[1m�[94m|�[0m �[1m�[96m|�[0m
�[1m�[94m46�[0m �[1m�[94m|�[0m �[1m�[96m|�[0m       # Initializes the CodeQL tools for scanning.
   �[1m�[94m|�[0m �[1m�[96m|__________________________________________________^�[0m �[1m�[96mdoes not set persist-credentials: false�[0m
   �[1m�[94m|�[0m
   �[1m�[94m= �[0m�[1mnote�[0m: audit confidence → Low
   �[1m�[94m= �[0m�[1mnote�[0m: this finding has an auto-fix
   �[1m�[94m= �[0m�[1mhelp�[0m: audit documentation → �[32mhttps://docs.zizmor.sh/audits/#artipacked�[39m

�[1m�[96mhelp[artipacked]�[0m�[1m: credential persistence through GitHub Actions artifacts�[0m
  �[1m�[94m--> �[0m/github/workspace/.github/workflows/linter.yaml:43:9
   �[1m�[94m|�[0m
�[1m�[94m43�[0m �[1m�[94m|�[0m         - name: Checkout Code
   �[1m�[94m|�[0m �[1m�[96m _________^�[0m
�[1m�[94m44�[0m �[1m�[94m|�[0m �[1m�[96m|�[0m         uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
�[1m�[94m45�[0m �[1m�[94m|�[0m �[1m�[96m|�[0m         with:
�[1m�[94m46�[0m �[1m�[94m|�[0m �[1m�[96m|�[0m           # Full git history is needed to get a proper list of changed files within `super-linter`
�[1m�[94m...�[0m  �[1m�[96m|�[0m
�[1m�[94m50�[0m �[1m�[94m|�[0m �[1m�[96m|�[0m       # Run Linter against code base #
�[1m�[94m51�[0m �[1m�[94m|�[0m �[1m�[96m|�[0m       ################################
   �[1m�[94m|�[0m �[1m�[96m|______________________________________^�[0m �[1m�[96mdoes not set persist-credentials: false�[0m
   �[1m�[94m|�[0m
   �[1m�[94m= �[0m�[1mnote�[0m: audit confidence → Low
   �[1m�[94m= �[0m�[1mnote�[0m: this finding has an auto-fix
   �[1m�[94m= �[0m�[1mhelp�[0m: audit documentation → �[32mhttps://docs.zizmor.sh/audits/#artipacked�[39m

�[1m�[91merror[impostor-commit]�[0m�[1m: commit with no history in referenced repository�[0m
  �[1m�[94m--> �[0m/github/workspace/.github/workflows/linter.yaml:53:15
   �[1m�[94m|�[0m
�[1m�[94m52�[0m �[1m�[94m|�[0m       - name: Lint Code Base
   �[1m�[94m|�[0m         �[1m�[94m--------------------�[0m �[1m�[94mthis step�[0m
�[1m�[94m53�[0m �[1m�[94m|�[0m         uses: github/super-linter@61abc07d755095a68f4987d1c2c3d1d64408f1f9 # v8.5.0
   �[1m�[94m|�[0m               �[1m�[91m^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^�[0m �[1m�[91muses a commit that doesn't belong to the specified org/repo�[0m
   �[1m�[94m|�[0m
   �[1m�[94m= �[0m�[1mnote�[0m: audit confidence → High
   �[1m�[94m= �[0m�[1mnote�[0m: this finding has an auto-fix
   �[1m�[94m= �[0m�[1mhelp�[0m: audit documentation → �[32mhttps://docs.zizmor.sh/audits/#impostor-commit�[39m

�[1m�[96mhelp[artipacked]�[0m�[1m: credential persistence through GitHub Actions artifacts�[0m
  �[1m�[94m--> �[0m/github/workspace/.github/workflows/test.yaml:25:9
   �[1m�[94m|�[0m
�[1m�[94m25�[0m �[1m�[94m|�[0m         - name: Checkout code
   �[1m�[94m|�[0m �[1m�[96m _________^�[0m
�[1m�[94m26�[0m �[1m�[94m|�[0m �[1m�[96m|�[0m         uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
   �[1m�[94m|�[0m �[1m�[96m|________________________________________________________________________________^�[0m �[1m�[96mdoes not set persist-credentials: false�[0m
   �[1m�[94m|�[0m
   �[1m�[94m= �[0m�[1mnote�[0m: audit confidence → Low
   �[1m�[94m= �[0m�[1mnote�[0m: this finding has an auto-fix
   �[1m�[94m= �[0m�[1mhelp�[0m: audit documentation → �[32mhttps://docs.zizmor.sh/audits/#artipacked�[39m

�[32m18�[39m findings (�[1m�[93m13�[39m suppressed, �[92m5�[39m fixable�[0m): �[35m0�[39m informational, �[36m4�[39m low, �[33m0�[39m medium, �[31m1�[39m high🌈 zizmor v1.22.0
�[32m INFO�[0m �[1maudit�[0m�[2m:�[0m �[2mzizmor�[0m�[2m:�[0m 🌈 completed /github/workspace/.github/workflows/build.yaml
�[32m INFO�[0m �[1maudit�[0m�[2m:�[0m �[2mzizmor�[0m�[2m:�[0m 🌈 completed /github/workspace/.github/workflows/codeql-analysis.yml
�[32m INFO�[0m �[1maudit�[0m�[2m:�[0m �[2mzizmor�[0m�[2m:�[0m 🌈 completed /github/workspace/.github/workflows/linter.yaml
�[32m INFO�[0m �[1maudit�[0m�[2m:�[0m �[2mzizmor�[0m�[2m:�[0m 🌈 completed /github/workspace/.github/workflows/test.yaml

@github-actions

github-actions Bot commented Mar 9, 2026

Copy link
Copy Markdown

Super-linter summary

Language Validation result
BIOME_FORMAT Fail ❌
BIOME_LINT Pass ✅
CHECKOV Pass ✅
GITHUB_ACTIONS Pass ✅
GITHUB_ACTIONS_ZIZMOR Fail ❌
GITLEAKS Pass ✅
GIT_MERGE_CONFLICT_MARKERS Pass ✅
GO_MODULES Pass ✅
JSCPD Pass ✅
PRE_COMMIT Pass ✅
SPELL_CODESPELL Pass ✅
TRIVY Pass ✅
YAML Pass ✅
YAML_PRETTIER Fail ❌

Super-linter detected linting errors

For more information, see the GitHub Actions workflow run

Powered by Super-linter

BIOME_FORMAT
Checked 1 file in 2ms. No fixes applied.
Found 1 error..github/linters/.jscpd.json format ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

  × Formatter would have printed the following content:

    1 1 │   {
    2   │ - ··"threshold":·0,
    3   │ - ··"ignore":·["**/*_test.go"],
    4   │ - ··"absolute":·true
    5   │ - }
      2 │ + → "threshold":·0,
      3 │ + → "ignore":·["**/*_test.go"],
      4 │ + → "absolute":·true
      5 │ + }
      6 │ +


format ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

  × Some errors were emitted while running checks.

GITHUB_ACTIONS_ZIZMOR
�[1m�[96mhelp[artipacked]�[0m�[1m: credential persistence through GitHub Actions artifacts�[0m
  �[1m�[94m--> �[0m/github/workspace/.github/workflows/build.yaml:26:9
   �[1m�[94m|�[0m
�[1m�[94m26�[0m �[1m�[94m|�[0m         - name: Checkout Code
   �[1m�[94m|�[0m �[1m�[96m _________^�[0m
�[1m�[94m27�[0m �[1m�[94m|�[0m �[1m�[96m|�[0m         uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
   �[1m�[94m|�[0m �[1m�[96m|________________________________________________________________________________^�[0m �[1m�[96mdoes not set persist-credentials: false�[0m
   �[1m�[94m|�[0m
   �[1m�[94m= �[0m�[1mnote�[0m: audit confidence → Low
   �[1m�[94m= �[0m�[1mnote�[0m: this finding has an auto-fix
   �[1m�[94m= �[0m�[1mhelp�[0m: audit documentation → �[32mhttps://docs.zizmor.sh/audits/#artipacked�[39m

�[1m�[96mhelp[artipacked]�[0m�[1m: credential persistence through GitHub Actions artifacts�[0m
  �[1m�[94m--> �[0m/github/workspace/.github/workflows/codeql-analysis.yml:44:9
   �[1m�[94m|�[0m
�[1m�[94m44�[0m �[1m�[94m|�[0m         - name: Checkout repository
   �[1m�[94m|�[0m �[1m�[96m _________^�[0m
�[1m�[94m45�[0m �[1m�[94m|�[0m �[1m�[96m|�[0m         uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
�[1m�[94m46�[0m �[1m�[94m|�[0m �[1m�[96m|�[0m
�[1m�[94m47�[0m �[1m�[94m|�[0m �[1m�[96m|�[0m       # Initializes the CodeQL tools for scanning.
   �[1m�[94m|�[0m �[1m�[96m|__________________________________________________^�[0m �[1m�[96mdoes not set persist-credentials: false�[0m
   �[1m�[94m|�[0m
   �[1m�[94m= �[0m�[1mnote�[0m: audit confidence → Low
   �[1m�[94m= �[0m�[1mnote�[0m: this finding has an auto-fix
   �[1m�[94m= �[0m�[1mhelp�[0m: audit documentation → �[32mhttps://docs.zizmor.sh/audits/#artipacked�[39m

�[1m�[96mhelp[artipacked]�[0m�[1m: credential persistence through GitHub Actions artifacts�[0m
  �[1m�[94m--> �[0m/github/workspace/.github/workflows/linter.yaml:44:9
   �[1m�[94m|�[0m
�[1m�[94m44�[0m �[1m�[94m|�[0m         - name: Checkout Code
   �[1m�[94m|�[0m �[1m�[96m _________^�[0m
�[1m�[94m45�[0m �[1m�[94m|�[0m �[1m�[96m|�[0m         uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
�[1m�[94m46�[0m �[1m�[94m|�[0m �[1m�[96m|�[0m         with:
�[1m�[94m47�[0m �[1m�[94m|�[0m �[1m�[96m|�[0m           # Full git history is needed for the changed-files list in super-linter.
�[1m�[94m...�[0m  �[1m�[96m|�[0m
�[1m�[94m51�[0m �[1m�[94m|�[0m �[1m�[96m|�[0m       # Run Linter against code base #
�[1m�[94m52�[0m �[1m�[94m|�[0m �[1m�[96m|�[0m       ################################
   �[1m�[94m|�[0m �[1m�[96m|______________________________________^�[0m �[1m�[96mdoes not set persist-credentials: false�[0m
   �[1m�[94m|�[0m
   �[1m�[94m= �[0m�[1mnote�[0m: audit confidence → Low
   �[1m�[94m= �[0m�[1mnote�[0m: this finding has an auto-fix
   �[1m�[94m= �[0m�[1mhelp�[0m: audit documentation → �[32mhttps://docs.zizmor.sh/audits/#artipacked�[39m

�[1m�[91merror[impostor-commit]�[0m�[1m: commit with no history in referenced repository�[0m
  �[1m�[94m--> �[0m/github/workspace/.github/workflows/linter.yaml:54:15
   �[1m�[94m|�[0m
�[1m�[94m53�[0m �[1m�[94m|�[0m       - name: Lint Code Base
   �[1m�[94m|�[0m         �[1m�[94m--------------------�[0m �[1m�[94mthis step�[0m
�[1m�[94m54�[0m �[1m�[94m|�[0m         uses: github/super-linter@61abc07d755095a68f4987d1c2c3d1d64408f1f9 # v8.5.0
   �[1m�[94m|�[0m               �[1m�[91m^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^�[0m �[1m�[91muses a commit that doesn't belong to the specified org/repo�[0m
   �[1m�[94m|�[0m
   �[1m�[94m= �[0m�[1mnote�[0m: audit confidence → High
   �[1m�[94m= �[0m�[1mnote�[0m: this finding has an auto-fix
   �[1m�[94m= �[0m�[1mhelp�[0m: audit documentation → �[32mhttps://docs.zizmor.sh/audits/#impostor-commit�[39m

�[1m�[96mhelp[artipacked]�[0m�[1m: credential persistence through GitHub Actions artifacts�[0m
  �[1m�[94m--> �[0m/github/workspace/.github/workflows/test.yaml:26:9
   �[1m�[94m|�[0m
�[1m�[94m26�[0m �[1m�[94m|�[0m         - name: Checkout code
   �[1m�[94m|�[0m �[1m�[96m _________^�[0m
�[1m�[94m27�[0m �[1m�[94m|�[0m �[1m�[96m|�[0m         uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
   �[1m�[94m|�[0m �[1m�[96m|________________________________________________________________________________^�[0m �[1m�[96mdoes not set persist-credentials: false�[0m
   �[1m�[94m|�[0m
   �[1m�[94m= �[0m�[1mnote�[0m: audit confidence → Low
   �[1m�[94m= �[0m�[1mnote�[0m: this finding has an auto-fix
   �[1m�[94m= �[0m�[1mhelp�[0m: audit documentation → �[32mhttps://docs.zizmor.sh/audits/#artipacked�[39m

�[32m18�[39m findings (�[1m�[93m13�[39m suppressed, �[92m5�[39m fixable�[0m): �[35m0�[39m informational, �[36m4�[39m low, �[33m0�[39m medium, �[31m1�[39m high🌈 zizmor v1.22.0
�[32m INFO�[0m �[1maudit�[0m�[2m:�[0m �[2mzizmor�[0m�[2m:�[0m 🌈 completed /github/workspace/.github/workflows/build.yaml
�[32m INFO�[0m �[1maudit�[0m�[2m:�[0m �[2mzizmor�[0m�[2m:�[0m 🌈 completed /github/workspace/.github/workflows/codeql-analysis.yml
�[32m INFO�[0m �[1maudit�[0m�[2m:�[0m �[2mzizmor�[0m�[2m:�[0m 🌈 completed /github/workspace/.github/workflows/linter.yaml
�[32m INFO�[0m �[1maudit�[0m�[2m:�[0m �[2mzizmor�[0m�[2m:�[0m 🌈 completed /github/workspace/.github/workflows/test.yaml
YAML_PRETTIER
Checking formatting...[�[33mwarn�[39m] .github/linters/.yamllint.yml
[�[33mwarn�[39m] Code style issues found in the above file. Run Prettier with --write to fix.

@github-actions

github-actions Bot commented Mar 9, 2026

Copy link
Copy Markdown

Super-linter summary

Language Validation result
BIOME_FORMAT Fail ❌
BIOME_LINT Pass ✅
CHECKOV Pass ✅
GITHUB_ACTIONS Pass ✅
GITHUB_ACTIONS_ZIZMOR Fail ❌
GITLEAKS Pass ✅
GIT_MERGE_CONFLICT_MARKERS Pass ✅
GO_MODULES Pass ✅
JSCPD Pass ✅
JSON Pass ✅
JSON_PRETTIER Fail ❌
PRE_COMMIT Pass ✅
SPELL_CODESPELL Pass ✅
TRIVY Pass ✅
YAML Pass ✅
YAML_PRETTIER Fail ❌

Super-linter detected linting errors

For more information, see the GitHub Actions workflow run

Powered by Super-linter

BIOME_FORMAT
Checked 1 file in 3ms. No fixes applied.
Found 1 error..github/linters/.jscpd.json format ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

  × Formatter would have printed the following content:

    3 3 │   	"ignore": ["**/*_test.go"],
    4 4 │   	"absolute": true
    5   │ - }
      5 │ + }
      6 │ +


format ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

  × Some errors were emitted while running checks.

GITHUB_ACTIONS_ZIZMOR
�[1m�[96mhelp[artipacked]�[0m�[1m: credential persistence through GitHub Actions artifacts�[0m
  �[1m�[94m--> �[0m/github/workspace/.github/workflows/build.yaml:26:9
   �[1m�[94m|�[0m
�[1m�[94m26�[0m �[1m�[94m|�[0m         - name: Checkout Code
   �[1m�[94m|�[0m �[1m�[96m _________^�[0m
�[1m�[94m27�[0m �[1m�[94m|�[0m �[1m�[96m|�[0m         uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
   �[1m�[94m|�[0m �[1m�[96m|________________________________________________________________________________^�[0m �[1m�[96mdoes not set persist-credentials: false�[0m
   �[1m�[94m|�[0m
   �[1m�[94m= �[0m�[1mnote�[0m: audit confidence → Low
   �[1m�[94m= �[0m�[1mnote�[0m: this finding has an auto-fix
   �[1m�[94m= �[0m�[1mhelp�[0m: audit documentation → �[32mhttps://docs.zizmor.sh/audits/#artipacked�[39m

�[1m�[96mhelp[artipacked]�[0m�[1m: credential persistence through GitHub Actions artifacts�[0m
  �[1m�[94m--> �[0m/github/workspace/.github/workflows/codeql-analysis.yml:44:9
   �[1m�[94m|�[0m
�[1m�[94m44�[0m �[1m�[94m|�[0m         - name: Checkout repository
   �[1m�[94m|�[0m �[1m�[96m _________^�[0m
�[1m�[94m45�[0m �[1m�[94m|�[0m �[1m�[96m|�[0m         uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
�[1m�[94m46�[0m �[1m�[94m|�[0m �[1m�[96m|�[0m
�[1m�[94m47�[0m �[1m�[94m|�[0m �[1m�[96m|�[0m       # Initializes the CodeQL tools for scanning.
   �[1m�[94m|�[0m �[1m�[96m|__________________________________________________^�[0m �[1m�[96mdoes not set persist-credentials: false�[0m
   �[1m�[94m|�[0m
   �[1m�[94m= �[0m�[1mnote�[0m: audit confidence → Low
   �[1m�[94m= �[0m�[1mnote�[0m: this finding has an auto-fix
   �[1m�[94m= �[0m�[1mhelp�[0m: audit documentation → �[32mhttps://docs.zizmor.sh/audits/#artipacked�[39m

�[1m�[96mhelp[artipacked]�[0m�[1m: credential persistence through GitHub Actions artifacts�[0m
  �[1m�[94m--> �[0m/github/workspace/.github/workflows/linter.yaml:44:9
   �[1m�[94m|�[0m
�[1m�[94m44�[0m �[1m�[94m|�[0m         - name: Checkout Code
   �[1m�[94m|�[0m �[1m�[96m _________^�[0m
�[1m�[94m45�[0m �[1m�[94m|�[0m �[1m�[96m|�[0m         uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
�[1m�[94m46�[0m �[1m�[94m|�[0m �[1m�[96m|�[0m         with:
�[1m�[94m47�[0m �[1m�[94m|�[0m �[1m�[96m|�[0m           # Full git history is needed for the changed-files list in super-linter.
�[1m�[94m...�[0m  �[1m�[96m|�[0m
�[1m�[94m51�[0m �[1m�[94m|�[0m �[1m�[96m|�[0m       # Run Linter against code base #
�[1m�[94m52�[0m �[1m�[94m|�[0m �[1m�[96m|�[0m       ################################
   �[1m�[94m|�[0m �[1m�[96m|______________________________________^�[0m �[1m�[96mdoes not set persist-credentials: false�[0m
   �[1m�[94m|�[0m
   �[1m�[94m= �[0m�[1mnote�[0m: audit confidence → Low
   �[1m�[94m= �[0m�[1mnote�[0m: this finding has an auto-fix
   �[1m�[94m= �[0m�[1mhelp�[0m: audit documentation → �[32mhttps://docs.zizmor.sh/audits/#artipacked�[39m

�[1m�[91merror[impostor-commit]�[0m�[1m: commit with no history in referenced repository�[0m
  �[1m�[94m--> �[0m/github/workspace/.github/workflows/linter.yaml:54:15
   �[1m�[94m|�[0m
�[1m�[94m53�[0m �[1m�[94m|�[0m       - name: Lint Code Base
   �[1m�[94m|�[0m         �[1m�[94m--------------------�[0m �[1m�[94mthis step�[0m
�[1m�[94m54�[0m �[1m�[94m|�[0m         uses: github/super-linter@61abc07d755095a68f4987d1c2c3d1d64408f1f9 # v8.5.0
   �[1m�[94m|�[0m               �[1m�[91m^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^�[0m �[1m�[91muses a commit that doesn't belong to the specified org/repo�[0m
   �[1m�[94m|�[0m
   �[1m�[94m= �[0m�[1mnote�[0m: audit confidence → High
   �[1m�[94m= �[0m�[1mnote�[0m: this finding has an auto-fix
   �[1m�[94m= �[0m�[1mhelp�[0m: audit documentation → �[32mhttps://docs.zizmor.sh/audits/#impostor-commit�[39m

�[1m�[96mhelp[artipacked]�[0m�[1m: credential persistence through GitHub Actions artifacts�[0m
  �[1m�[94m--> �[0m/github/workspace/.github/workflows/test.yaml:26:9
   �[1m�[94m|�[0m
�[1m�[94m26�[0m �[1m�[94m|�[0m         - name: Checkout code
   �[1m�[94m|�[0m �[1m�[96m _________^�[0m
�[1m�[94m27�[0m �[1m�[94m|�[0m �[1m�[96m|�[0m         uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
   �[1m�[94m|�[0m �[1m�[96m|________________________________________________________________________________^�[0m �[1m�[96mdoes not set persist-credentials: false�[0m
   �[1m�[94m|�[0m
   �[1m�[94m= �[0m�[1mnote�[0m: audit confidence → Low
   �[1m�[94m= �[0m�[1mnote�[0m: this finding has an auto-fix
   �[1m�[94m= �[0m�[1mhelp�[0m: audit documentation → �[32mhttps://docs.zizmor.sh/audits/#artipacked�[39m

�[32m18�[39m findings (�[1m�[93m13�[39m suppressed, �[92m5�[39m fixable�[0m): �[35m0�[39m informational, �[36m4�[39m low, �[33m0�[39m medium, �[31m1�[39m high🌈 zizmor v1.22.0
�[32m INFO�[0m �[1maudit�[0m�[2m:�[0m �[2mzizmor�[0m�[2m:�[0m 🌈 completed /github/workspace/.github/workflows/build.yaml
�[32m INFO�[0m �[1maudit�[0m�[2m:�[0m �[2mzizmor�[0m�[2m:�[0m 🌈 completed /github/workspace/.github/workflows/codeql-analysis.yml
�[32m INFO�[0m �[1maudit�[0m�[2m:�[0m �[2mzizmor�[0m�[2m:�[0m 🌈 completed /github/workspace/.github/workflows/linter.yaml
�[32m INFO�[0m �[1maudit�[0m�[2m:�[0m �[2mzizmor�[0m�[2m:�[0m 🌈 completed /github/workspace/.github/workflows/test.yaml
JSON_PRETTIER
Checking formatting...[�[33mwarn�[39m] .github/linters/.jscpd.json
[�[33mwarn�[39m] Code style issues found in the above file. Run Prettier with --write to fix.
YAML_PRETTIER
Checking formatting...[�[33mwarn�[39m] .github/linters/.yamllint.yml
[�[33mwarn�[39m] Code style issues found in the above file. Run Prettier with --write to fix.

@github-actions

github-actions Bot commented Mar 9, 2026

Copy link
Copy Markdown

Super-linter summary

Language Validation result
BIOME_FORMAT Fail ❌
BIOME_LINT Fail ❌
CHECKOV Pass ✅
GITHUB_ACTIONS Pass ✅
GITHUB_ACTIONS_ZIZMOR Pass ✅
GITLEAKS Pass ✅
GIT_MERGE_CONFLICT_MARKERS Pass ✅
GO_MODULES Pass ✅
JSCPD Pass ✅
JSON Pass ✅
JSON_PRETTIER Pass ✅
PRE_COMMIT Pass ✅
SPELL_CODESPELL Pass ✅
TRIVY Pass ✅
YAML Pass ✅
YAML_PRETTIER Pass ✅

Super-linter detected linting errors

For more information, see the GitHub Actions workflow run

Powered by Super-linter

BIOME_FORMAT
/github/workspace/.github/linters/biome.json configuration ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

  × Found a nested root configuration, but there's already a root configuration.

  i The other configuration was found in /github/workspace.

  i Use the migration command from the root of the project to update the configuration.

  $ biome migrate --write


configuration ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

  × Biome exited because the configuration resulted in errors. Please fix them.

BIOME_LINT
/github/workspace/.github/linters/biome.json configuration ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

  × Found a nested root configuration, but there's already a root configuration.

  i The other configuration was found in /github/workspace.

  i Use the migration command from the root of the project to update the configuration.

  $ biome migrate --write


configuration ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

  × Biome exited because the configuration resulted in errors. Please fix them.

@github-actions

github-actions Bot commented Mar 9, 2026

Copy link
Copy Markdown

Super-linter summary

Language Validation result
CHECKOV Pass ✅
GITHUB_ACTIONS Pass ✅
GITHUB_ACTIONS_ZIZMOR Pass ✅
GITLEAKS Pass ✅
GIT_MERGE_CONFLICT_MARKERS Pass ✅
GO_MODULES Pass ✅
JSCPD Pass ✅
JSON Pass ✅
JSON_PRETTIER Pass ✅
PRE_COMMIT Pass ✅
SPELL_CODESPELL Pass ✅
TRIVY Pass ✅
YAML Pass ✅
YAML_PRETTIER Pass ✅

All files and directories linted successfully

For more information, see the GitHub Actions workflow run

Powered by Super-linter

@tomtwinkle tomtwinkle merged commit 0e6fd84 into main Mar 9, 2026
19 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants