[dependabot]

Bumps the github-actions-dependencies group with 14 updates in the / directory:

Package	From	To
hoverkraft-tech/ci-github-common/.github/workflows/greetings.yml	0.38.0	0.39.1
hoverkraft-tech/ci-github-publish/.github/workflows/release-actions.yml	0.28.0	1.0.2
hoverkraft-tech/ci-github-common/.github/workflows/need-fix-to-issue.yml	0.38.0	0.39.1
actions/create-github-app-token	3.2.0	3.3.0
renovatebot/github-action	46.3.8	46.3.9
hoverkraft-tech/ci-github-common/.github/workflows/semantic-pull-request.yml	0.38.0	0.39.1
hoverkraft-tech/ci-github-common/.github/workflows/linter.yml	0.38.0	0.39.1
hoverkraft-tech/ci-github-common/.github/workflows/stale.yml	0.38.0	0.39.1
docker/login-action	4.6.0	4.7.0
hoverkraft-tech/ci-github-common/actions/checkout	0.38.0	0.39.1
hoverkraft-tech/ci-github-common/actions/local-workflow-actions	0.38.0	0.39.1
hoverkraft-tech/ci-github-common/actions/set-matrix-output	0.38.0	0.39.1
hoverkraft-tech/ci-github-common/actions/get-matrix-outputs	0.38.0	0.39.1
hoverkraft-tech/ci-github-common/actions/repository-owner-is-organization	0.38.0	0.39.1
hoverkraft-tech/ci-github-common/actions/checkout	0.38.0	0.39.1
actions/create-github-app-token	3.2.0	3.3.0
hoverkraft-tech/ci-github-common/actions/checkout	0.38.0	0.39.1

Bumps the github-actions-dependencies group with 3 updates in the /actions/docker/build-image directory: hoverkraft-tech/ci-github-common/actions/local-actions, hoverkraft-tech/ci-github-common/actions/slugify and int128/docker-build-cache-config-action.
Bumps the github-actions-dependencies group with 4 updates in the /actions/helm/generate-docs directory: actions/create-github-app-token, hoverkraft-tech/ci-github-common/actions/checkout, hoverkraft-tech/ci-github-nodejs/actions/setup-node and hoverkraft-tech/ci-github-common/actions/create-and-merge-pull-request.
Bumps the github-actions-dependencies group with 3 updates in the /actions/helm/release-chart directory: hoverkraft-tech/ci-github-common/actions/checkout, hoverkraft-tech/ci-github-common/actions/local-actions and hoverkraft-tech/ci-github-nodejs/actions/setup-node.
Bumps the github-actions-dependencies group with 1 update in the /actions/helm/update-chart-values directory: mikefarah/yq.

Updates hoverkraft-tech/ci-github-common/.github/workflows/greetings.yml from 0.38.0 to 0.39.1

Release notes

Sourced from hoverkraft-tech/ci-github-common/.github/workflows/greetings.yml's releases.

0.39.1

Release Summary

The need-fix-to-issue action now categorizes and deduplicates generated issues. The linter skips commitlint by default on scheduled and manual runs.

Internal updates refresh GitHub Actions dependencies and documentation for actions and workflows.

Breaking changes

No breaking changes reported.

What's Changed

• feat(need-fix-to-issue): categorize and deduplicate generated issues by @​neilime in hoverkraft-tech/ci-github-common#611
• docs: update actions and workflows documentation by @​hoverkraft-bot[bot] in hoverkraft-tech/ci-github-common#612
• fix(linter): skip commitlint by default on scheduled and manual runs by @​neilime in hoverkraft-tech/ci-github-common#613
• docs: update actions and workflows documentation by @​hoverkraft-bot[bot] in hoverkraft-tech/ci-github-common#616
• chore: bump the github-actions-dependencies group across 3 directories with 4 updates by @​dependabot[bot] in hoverkraft-tech/ci-github-common#610
• docs: update actions and workflows documentation by @​hoverkraft-bot[bot] in hoverkraft-tech/ci-github-common#617

Full Changelog: hoverkraft-tech/ci-github-common@0.39.0...0.39.1

0.39.0

Release Summary

Linting now shares Super-Linter defaults across local and CI runs for consistent configuration. Super-Linter summaries are enabled by default, with fallback Conventional Commits rules when commitlint is enabled without a project configuration.

Internal updates refresh documentation, GitHub Actions dependencies, and fast-xml-parser.

Breaking changes

The actions/local-actions and actions/local-workflow-actions helpers have been removed; migrate to direct $/ action references and remove dependencies on the helpers’ exposed paths or outputs. These references require GitHub.com and GitHub Actions runner 2.336.0 or newer.

What's Changed

• docs: update actions and workflows documentation by @​hoverkraft-bot[bot] in hoverkraft-tech/ci-github-common#593
• chore: bump fast-xml-parser from 5.10.1 to 5.11.0 in /actions/parse-ci-reports in the npm-dependencies group across 1 directory by @​dependabot[bot] in hoverkraft-tech/ci-github-common#595
• chore: bump the github-actions-dependencies group across 1 directory with 3 updates by @​dependabot[bot] in hoverkraft-tech/ci-github-common#594
• feat(linter): align Super-Linter defaults with workflow behavior by @​neilime with @​Copilot in hoverkraft-tech/ci-github-common#597
• chore: bump fast-xml-parser from 5.11.0 to 5.11.1 in /actions/parse-ci-reports in the npm-dependencies group across 1 directory by @​dependabot[bot] in hoverkraft-tech/ci-github-common#598
• chore: bump the github-actions-dependencies group across 1 directory with 2 updates by @​dependabot[bot] in hoverkraft-tech/ci-github-common#596
• chore: bump the github-actions-dependencies group across 1 directory with 3 updates by @​dependabot[bot] in hoverkraft-tech/ci-github-common#600
• chore: bump fast-xml-parser from 5.11.1 to 5.11.2 in /actions/parse-ci-reports in the npm-dependencies group across 1 directory by @​dependabot[bot] in hoverkraft-tech/ci-github-common#603
• chore: bump the github-actions-dependencies group across 1 directory with 4 updates by @​dependabot[bot] in hoverkraft-tech/ci-github-common#604
• chore: bump the github-actions-dependencies group across 2 directories with 2 updates by @​dependabot[bot] in hoverkraft-tech/ci-github-common#606
• feat!: share linting defaults and remove local action helpers by @​neilime in hoverkraft-tech/ci-github-common#607
• docs: update actions and workflows documentation by @​hoverkraft-bot[bot] in hoverkraft-tech/ci-github-common#609

Full Changelog: hoverkraft-tech/ci-github-common@0.38.0...0.39.0

Commits

• 44f6108 docs: update actions and workflows documentation
• 088d6de chore: bump the github-actions-dependencies group across 3 directories with 4...
• b42424d docs: update actions and workflows documentation
• 1d79d97 fix(deps): add Renovate fallback for Docker actions
• 089771f fix(linter): skip commitlint by default on scheduled and manual runs
• e528dcb docs: update actions and workflows documentation
• e74cfbf feat(need-fix-to-issue): categorize and deduplicate generated issues
• ab69f41 docs: update actions and workflows documentation
• a3ee349 fix(ci): pin shared super-linter image by digest
• 467cdd3 feat: share linting defaults and remove local action helpers
• Additional commits viewable in compare view

Updates hoverkraft-tech/ci-github-publish/.github/workflows/release-actions.yml from 0.28.0 to 1.0.2

Release notes

Sourced from hoverkraft-tech/ci-github-publish/.github/workflows/release-actions.yml's releases.

Version 1.0.2

Release Summary

Release notes generation and version calculation now scope changes to the working directory and configured include paths, and manual releases can be forced through a new force input. The release also updates the actions and workflows documentation.

Internally, the hoverkraft-tech/docker-base-images/super-linter build dependency was bumped from 1.1.0 to 2.0.0.

Breaking changes

There is no confirmed breaking change in this release.

---

What's Changed

Dependency Updates

• build(deps): bump hoverkraft-tech/docker-base-images/super-linter from 1.1.0 to 2.0.0 in the docker-dependencies group (#486) @​dependabot[bot]

Bug Fixes

• fix(release): scope changes and allow forced manual releases (#485) @​neilime

Documentation

• docs: update actions and workflows documentation (#487) @​hoverkraft-bot[bot]

New Contributors

No new contributors in this release.

Full Changelog: hoverkraft-tech/ci-github-publish@1.0.1...1.0.2

Version 1.0.1

Release Summary

A release workflow fix now scopes release history in the shared prepare action by the configured tag prefix to avoid selecting the wrong comparison base when repositories publish both repository and component releases. Documentation for actions and workflows was also updated.

Internal changes include a dependency update that bumps actions/create-github-app-token from 3.2.0 to 3.3.0.

Breaking changes

There is no breaking change.

---

What's Changed

Dependency Updates

... (truncated)

Commits

• 4d90668 build(deps): bump hoverkraft-tech/docker-base-images/super-linter
• 20e4079 docs: update actions and workflows documentation
• 923ea84 fix(ci): document force-release Checkov exception
• b227d7b feat(release): allow forced manual releases
• 1fda75d fix(release): scope generated releases to working directory
• c1847ab fix(release)!: respect explicit include-paths
• 16cb157 docs: update actions and workflows documentation
• d42268c build(deps): bump actions/create-github-app-token
• ac76e7e docs: update actions and workflows documentation
• 500ab0e fix(release): scope release history to the configured tag prefix
• Additional commits viewable in compare view

Updates hoverkraft-tech/ci-github-common/.github/workflows/need-fix-to-issue.yml from 0.38.0 to 0.39.1

Release notes

Sourced from hoverkraft-tech/ci-github-common/.github/workflows/need-fix-to-issue.yml's releases.

0.39.1

Release Summary

The need-fix-to-issue action now categorizes and deduplicates generated issues. The linter skips commitlint by default on scheduled and manual runs.

Internal updates refresh GitHub Actions dependencies and documentation for actions and workflows.

Breaking changes

No breaking changes reported.

What's Changed

• feat(need-fix-to-issue): categorize and deduplicate generated issues by @​neilime in hoverkraft-tech/ci-github-common#611
• docs: update actions and workflows documentation by @​hoverkraft-bot[bot] in hoverkraft-tech/ci-github-common#612
• fix(linter): skip commitlint by default on scheduled and manual runs by @​neilime in hoverkraft-tech/ci-github-common#613
• docs: update actions and workflows documentation by @​hoverkraft-bot[bot] in hoverkraft-tech/ci-github-common#616
• chore: bump the github-actions-dependencies group across 3 directories with 4 updates by @​dependabot[bot] in hoverkraft-tech/ci-github-common#610
• docs: update actions and workflows documentation by @​hoverkraft-bot[bot] in hoverkraft-tech/ci-github-common#617

Full Changelog: hoverkraft-tech/ci-github-common@0.39.0...0.39.1

0.39.0

Release Summary

Linting now shares Super-Linter defaults across local and CI runs for consistent configuration. Super-Linter summaries are enabled by default, with fallback Conventional Commits rules when commitlint is enabled without a project configuration.

Internal updates refresh documentation, GitHub Actions dependencies, and fast-xml-parser.

Breaking changes

The actions/local-actions and actions/local-workflow-actions helpers have been removed; migrate to direct $/ action references and remove dependencies on the helpers’ exposed paths or outputs. These references require GitHub.com and GitHub Actions runner 2.336.0 or newer.

What's Changed

• docs: update actions and workflows documentation by @​hoverkraft-bot[bot] in hoverkraft-tech/ci-github-common#593
• chore: bump fast-xml-parser from 5.10.1 to 5.11.0 in /actions/parse-ci-reports in the npm-dependencies group across 1 directory by @​dependabot[bot] in hoverkraft-tech/ci-github-common#595
• chore: bump the github-actions-dependencies group across 1 directory with 3 updates by @​dependabot[bot] in hoverkraft-tech/ci-github-common#594
• feat(linter): align Super-Linter defaults with workflow behavior by @​neilime with @​Copilot in hoverkraft-tech/ci-github-common#597
• chore: bump fast-xml-parser from 5.11.0 to 5.11.1 in /actions/parse-ci-reports in the npm-dependencies group across 1 directory by @​dependabot[bot] in hoverkraft-tech/ci-github-common#598
• chore: bump the github-actions-dependencies group across 1 directory with 2 updates by @​dependabot[bot] in hoverkraft-tech/ci-github-common#596
• chore: bump the github-actions-dependencies group across 1 directory with 3 updates by @​dependabot[bot] in hoverkraft-tech/ci-github-common#600
• chore: bump fast-xml-parser from 5.11.1 to 5.11.2 in /actions/parse-ci-reports in the npm-dependencies group across 1 directory by @​dependabot[bot] in hoverkraft-tech/ci-github-common#603
• chore: bump the github-actions-dependencies group across 1 directory with 4 updates by @​dependabot[bot] in hoverkraft-tech/ci-github-common#604
• chore: bump the github-actions-dependencies group across 2 directories with 2 updates by @​dependabot[bot] in hoverkraft-tech/ci-github-common#606
• feat!: share linting defaults and remove local action helpers by @​neilime in hoverkraft-tech/ci-github-common#607
• docs: update actions and workflows documentation by @​hoverkraft-bot[bot] in hoverkraft-tech/ci-github-common#609

Full Changelog: hoverkraft-tech/ci-github-common@0.38.0...0.39.0

Commits

• 44f6108 docs: update actions and workflows documentation
• 088d6de chore: bump the github-actions-dependencies group across 3 directories with 4...
• b42424d docs: update actions and workflows documentation
• 1d79d97 fix(deps): add Renovate fallback for Docker actions
• 089771f fix(linter): skip commitlint by default on scheduled and manual runs
• e528dcb docs: update actions and workflows documentation
• e74cfbf feat(need-fix-to-issue): categorize and deduplicate generated issues
• ab69f41 docs: update actions and workflows documentation
• a3ee349 fix(ci): pin shared super-linter image by digest
• 467cdd3 feat: share linting defaults and remove local action helpers
• Additional commits viewable in compare view

Updates actions/create-github-app-token from 3.2.0 to 3.3.0

Release notes

Sourced from actions/create-github-app-token's releases.

v3.3.0

3.3.0 (2026-10-12)

Features

• update permission inputs (#399) (a47236f)

Bug Fixes

• deps: bump nested undici from 6.24.0 to 6.29.0 (#403) (12461a3)
• deps: bump the production-dependencies group across 1 directory with 3 updates (#395) (a69c19d)

Changelog

Sourced from actions/create-github-app-token's changelog.

Changelog

3.3.0 (2026-10-12)

Features

• update permission inputs (#399) (a47236f)

Bug Fixes

• deps: bump nested undici from 6.24.0 to 6.29.0 (#403) (12461a3)
• deps: bump the production-dependencies group across 1 directory with 3 updates (#395) (a69c19d)

3.2.0 (2026-05-12)

Features

• add support for enterprise-level GitHub Apps (#263) (952a2a7)
• support full repository names in repositories input (#372) (85eb8dd)

Bug Fixes

• deps: bump @​actions/core from 3.0.0 to 3.0.1 in the production-dependencies group (#364) (43e5c34)
• validate private-key input (#376) (f24bbd8)

Commits

• 64ab729 chore(main): release 3.3.0 (#402)
• f3a828e ci: create signed dist commits in release workflow (#404)
• 655017f docs: clarify when owner grants access to all repositories (#378)
• 12461a3 fix(deps): bump nested undici from 6.24.0 to 6.29.0 (#403)
• a47236f feat: update permission inputs (#399)
• a69c19d fix(deps): bump the production-dependencies group across 1 directory with 3 u...
• d5cb7ae build(deps): bump actions/checkout from 6 to 7 (#384)
• 575da86 build(deps): bump stefanzweifel/git-auto-commit-action from 7.1.0 to 7.2.0 in...
• e85f677 test: omit stack traces from snapshots (#401)
• 9419396 build(deps-dev): bump c8 from 11.0.0 to 12.0.0 (#400)
• Additional commits viewable in compare view

Updates renovatebot/github-action from 46.3.8 to 46.3.9

Release notes

Sourced from renovatebot/github-action's releases.

v46.3.9

46.3.9 (2026-10-19)

Documentation

• update references to renovatebot/github-action to v46.3.8 (e7056e8)

Miscellaneous Chores

• deps: update dependency @​types/node to v24.19.2 (806da89)
• deps: update dependency prettier to v3.9.10 (65e8909)
• deps: update dependency typescript-eslint to v8.71.1 (6de5a71)
• deps: update node.js to v24.22.0 (19cb3fd)

Build System

• deps: lock file maintenance (6317cf9)

Continuous Integration

• deps: update ghcr.io/renovatebot/renovate docker tag to v44.151.1 (8da84b8)
• deps: update ghcr.io/renovatebot/renovate docker tag to v44.151.2 (4a8356d)
• deps: update ghcr.io/renovatebot/renovate docker tag to v44.151.4 (5f2ff35)
• deps: update ghcr.io/renovatebot/renovate docker tag to v44.151.5 (#1084) (a602092)
• deps: update ghcr.io/renovatebot/renovate docker tag to v44.155.1 (e6e0f70)
• deps: update ghcr.io/renovatebot/renovate docker tag to v44.155.2 (919f93f)
• deps: update ghcr.io/renovatebot/renovate docker tag to v44.155.9 (1d5db1b)
• deps: update ghcr.io/renovatebot/renovate docker tag to v44.156.0 (edb9e1c)
• deps: update ghcr.io/renovatebot/renovate docker tag to v44.157.0 (30a763b)
• deps: update ghcr.io/renovatebot/renovate docker tag to v44.158.0 (691b828)
• deps: update ghcr.io/renovatebot/renovate docker tag to v44.158.1 (5c668ae)
• deps: update ghcr.io/renovatebot/renovate docker tag to v44.160.0 (6b40479)
• deps: update ghcr.io/renovatebot/renovate docker tag to v44.160.1 (219d31e)
• deps: update ghcr.io/renovatebot/renovate docker tag to v44.161.0 (1fca46a)
• deps: update ghcr.io/renovatebot/renovate docker tag to v44.161.1 (849cde1)
• deps: update ghcr.io/renovatebot/renovate docker tag to v44.161.2 (04df3e7)
• deps: update ghcr.io/renovatebot/renovate docker tag to v44.164.10 (00c6c8c)
• deps: update ghcr.io/renovatebot/renovate docker tag to v44.164.5 (67445cd)
• deps: update ghcr.io/renovatebot/renovate docker tag to v44.164.6 (545db6b)
• deps: update ghcr.io/renovatebot/renovate docker tag to v44.164.7 (#1087) (04c6455)
• deps: update ghcr.io/renovatebot/renovate docker tag to v44.165.0 (c9d8e2d)
• deps: update ghcr.io/renovatebot/renovate docker tag to v44.165.1 (4973951)
• deps: update ghcr.io/renovatebot/renovate docker tag to v44.165.2 (3a41b6a)
• deps: update ghcr.io/renovatebot/renovate docker tag to v44.165.3 (1c1aaf9)
• deps: update ghcr.io/renovatebot/renovate docker tag to v44.166.0 (5c25a55)
• deps: update ghcr.io/renovatebot/renovate docker tag to v44.167.0 (a58e0ea)
• deps: update ghcr.io/renovatebot/renovate docker tag to v44.167.1 (14f4fe9)
• deps: update ghcr.io/renovatebot/renovate docker tag to v44.167.5 (b8b8006)
• deps: update ghcr.io/zizmorcore/zizmor docker tag to v1.31.0 (#1085) (21eef48)
• deps: update ghcr.io/zizmorcore/zizmor docker tag to v1.31.1 (#1086) (2ad8b16)

... (truncated)

Commits

• a63d9a7 chore(release): 46.3.9 [skip ci]
• 9ce2ccd skip: merge (6317cf9db11e7fe0de3d69d095aab5030894ecf3) [skip release]
• 6317cf9 build(deps): lock file maintenance
• e20dccb skip: merge (b8b8006a723c8c6d0165f11a6ce3ecc6551da382) [skip release]
• b8b8006 ci(deps): update ghcr.io/renovatebot/renovate docker tag to v44.167.5
• f1c3f98 skip: merge (14f4fe93ef048cb72b2cc2cf2e18e033844a948e) [skip release]
• 14f4fe9 ci(deps): update ghcr.io/renovatebot/renovate docker tag to v44.167.1
• 5efd758 skip: merge (a58e0ea07e37965814d77caff6f43fb3cddb74b1) [skip release]
• a58e0ea ci(deps): update ghcr.io/renovatebot/renovate docker tag to v44.167.0
• e3364fa skip: merge (5c25a55149494fa2037fb6c53fedc92831db01aa) [skip release]
• Additional commits viewable in compare view

Updates hoverkraft-tech/ci-github-common/.github/workflows/semantic-pull-request.yml from 0.38.0 to 0.39.1

Release notes

Sourced from hoverkraft-tech/ci-github-common/.github/workflows/semantic-pull-request.yml's releases.

0.39.1

Release Summary

The need-fix-to-issue action now categorizes and deduplicates generated issues. The linter skips commitlint by default on scheduled and manual runs.

Internal updates refresh GitHub Actions dependencies and documentation for actions and workflows.

Breaking changes

No breaking changes reported.

What's Changed

• feat(need-fix-to-issue): categorize and deduplicate generated issues by @​neilime in hoverkraft-tech/ci-github-common#611
• docs: update actions and workflows documentation by @​hoverkraft-bot[bot] in hoverkraft-tech/ci-github-common#612
• fix(linter): skip commitlint by default on scheduled and manual runs by @​neilime in hoverkraft-tech/ci-github-common#613
• docs: update actions and workflows documentation by @​hoverkraft-bot[bot] in hoverkraft-tech/ci-github-common#616
• chore: bump the github-actions-dependencies group across 3 directories with 4 updates by @​dependabot[bot] in hoverkraft-tech/ci-github-common#610
• docs: update actions and workflows documentation by @​hoverkraft-bot[bot] in hoverkraft-tech/ci-github-common#617

Full Changelog: hoverkraft-tech/ci-github-common@0.39.0...0.39.1

0.39.0

Release Summary

Linting now shares Super-Linter defaults across local and CI runs for consistent configuration. Super-Linter summaries are enabled by default, with fallback Conventional Commits rules when commitlint is enabled without a project configuration.

Internal updates refresh documentation, GitHub Actions dependencies, and fast-xml-parser.

Breaking changes

The actions/local-actions and actions/local-workflow-actions helpers have been removed; migrate to direct $/ action references and remove dependencies on the helpers’ exposed paths or outputs. These references require GitHub.com and GitHub Actions runner 2.336.0 or newer.

What's Changed

• docs: update actions and workflows documentation by @​hoverkraft-bot[bot] in hoverkraft-tech/ci-github-common#593
• chore: bump fast-xml-parser from 5.10.1 to 5.11.0 in /actions/parse-ci-reports in the npm-dependencies group across 1 directory by @​dependabot[bot] in hoverkraft-tech/ci-github-common#595
• chore: bump the github-actions-dependencies group across 1 directory with 3 updates by @​dependabot[bot] in hoverkraft-tech/ci-github-common#594
• feat(linter): align Super-Linter defaults with workflow behavior by @​neilime with @​Copilot in hoverkraft-tech/ci-github-common#597
• chore: bump fast-xml-parser from 5.11.0 to 5.11.1 in /actions/parse-ci-reports in the npm-dependencies group across 1 directory by @​dependabot[bot] in hoverkraft-tech/ci-github-common#598
• chore: bump the github-actions-dependencies group across 1 directory with 2 updates by @​dependabot[bot] in hoverkraft-tech/ci-github-common#596
• chore: bump the github-actions-dependencies group across 1 directory with 3 updates by @​dependabot[bot] in hoverkraft-tech/ci-github-common#600
• chore: bump fast-xml-parser from 5.11.1 to 5.11.2 in /actions/parse-ci-reports in the npm-dependencies group across 1 directory by @​dependabot[bot] in hoverkraft-tech/ci-github-common#603
• chore: bump the github-actions-dependencies group across 1 directory with 4 updates by @​dependabot[bot] in hoverkraft-tech/ci-github-common#604
• chore: bump the github-actions-dependencies group across 2 directories with 2 updates by @​dependabot[bot] in hoverkraft-tech/ci-github-common#606
• feat!: share linting defaults and remove local action helpers by @​neilime in hoverkraft-tech/ci-github-common#607
• docs: update actions and workflows documentation by @​hoverkraft-bot[bot] in hoverkraft-tech/ci-github-common#609

Full Changelog: hoverkraft-tech/ci-github-common@0.38.0...0.39.0

Commits

• 44f6108 docs: update actions and workflows documentation
• 088d6de chore: bump the github-actions-dependencies group across 3 directories with 4...
• b42424d docs: update actions and workflows documentation
• 1d79d97 fix(deps): add Renovate fallback for Docker actions
• 089771f fix(linter): skip commitlint by default on scheduled and manual runs
• e528dcb docs: update actions and workflows documentation
• e74cfbf feat(need-fix-to-issue): categorize and deduplicate generated issues
• ab69f41 docs: update actions and workflows documentation
• a3ee349 fix(ci): pin shared super-linter image by digest
• 467cdd3 feat: share linting defaults and remove local action helpers
• Additional commits viewable in compare view

Updates hoverkraft-tech/ci-github-common/.github/workflows/linter.yml from 0.38.0 to 0.39.1

Release notes

Sourced from hoverkraft-tech/ci-github-common/.github/workflows/linter.yml's releases.

0.39.1

Release Summary

The need-fix-to-issue action now categorizes and deduplicates generated issues. The linter skips commitlint by default on scheduled and manual runs.

Internal updates refresh GitHub Actions dependencies and documentation for actions and workflows.

Breaking changes

No breaking changes reported.

What's Changed

• feat(need-fix-to-issue): categorize and deduplicate generated issues by @​neilime in hoverkraft-tech/ci-github-common#611
• docs: update actions and workflows documentation by @​hoverkraft-bot[bot] in hoverkraft-tech/ci-github-common#612
• fix(linter): skip commitlint by default on scheduled and manual runs by @​neilime in hoverkraft-tech/ci-github-common#613
• docs: update actions and workflows documentation by @​hoverkraft-bot[bot] in hoverkraft-tech/ci-github-common#616
• chore: bump the github-actions-dependencies group across 3 directories with 4 updates by @​dependabot[bot] in hoverkraft-tech/ci-github-common#610
• docs: update actions and workflows documentation by @​hoverkraft-bot[bot] in hoverkraft-tech/ci-github-common#617

Full Changelog: hoverkraft-tech/ci-github-common@0.39.0...0.39.1

0.39.0

Release Summary

Linting now shares Super-Linter defaults across local and CI runs for consistent configuration. Super-Linter summaries are enabled by default, with fallback Conventional Commits rules when commitlint is enabled without a project configuration.

Internal updates refresh documentation, GitHub Actions dependencies, and fast-xml-parser.

Breaking changes

The actions/local-actions and actions/local-workflow-actions helpers have been removed; migrate to direct $/ action references and remove dependencies on the helpers’ exposed paths or outputs. These references require GitHub.com and GitHub Actions runner 2.336.0 or newer.

What's Changed

• docs: update actions and workflows documentation by @​hoverkraft-bot[bot] in hoverkraft-tech/ci-github-common#593
• chore: bump fast-xml-parser from 5.10.1 to 5.11.0 in /actions/parse-ci-reports in the npm-dependencies group across 1 directory by @​dependabot[bot] in hoverkraft-tech/ci-github-common#595
• chore: bump the github-actions-dependencies group across 1 directory with 3 updates by @​dependabot[bot] in hoverkraft-tech/ci-github-common#594
• feat(linter): align Super-Linter defaults with workflow behavior by @​neilime with @​Copilot in hoverkraft-tech/ci-github-common#597
• chore: bump fast-xml-parser from 5.11.0 to 5.11.1 in /actions/parse-ci-reports in the npm-dependencies group across 1 directory by @​dependabot[bot] in hoverkraft-tech/ci-github-common#598
• chore: bump the github-actions-dependencies group across 1 directory with 2 updates by @​dependabot[bot] in hoverkraft-tech/ci-github-common#596
• chore: bump the github-actions-dependencies group across 1 directory with 3 updates by @​dependabot[bot] in hoverkraft-tech/ci-github-common#600
• chore: bump fast-xml-parser from 5.11.1 to 5.11.2 in /actions/parse-ci-reports in the npm-dependencies group across 1 directory by @​dependabot[bot] in hoverkraft-tech/ci-github-common#603
• chore: bump the github-actions-dependencies group across 1 directory with 4 updates by @​dependabot[bot] in hoverkraft-tech/ci-github-common#604
• chore: bump the github-actions-dependencies group across 2 directories with 2 updates by @​dependabot[bot] in hoverkraft-tech/ci-github-common#606
• feat!: share linting defaults and remove local action helpers by @​neilime in hoverkraft-tech/ci-github-common#607
• docs: update actions and workflows documentation by @​hoverkraft-bot[bot] in hoverkraft-tech/ci-github-common#609

Full Changelog: hoverkraft-tech/ci-github-common@0.38.0...0.39.0

Commits

• 44f6108 docs: update actions and workflows documentation
• 088d6de chore: bump the github-actions-dependencies group across 3 directories with 4...
• b42424d docs: update actions and workflows documentation
• 1d79d97 fix(deps): add Renovate fallback for Docker actions
• 089771f fix(linter): skip commitlint by default on scheduled and manual runs
• e528dcb docs: update actions and workflows documentation
• e74cfbf feat(need-fix-to-issue): categorize and deduplicate generated issues
• ab69f41 docs: update actions and workflows documentation
• a3ee349 fix(ci): pin shared super-linter image by digest
• 467cdd3 feat: share linting defaults and remove local action helpers
• Additional commits viewable in compare view

Updates hoverkraft-tech/ci-github-common/.github/workflows/stale.yml from 0.38.0 to 0.39.1

Release notes

So...

Description has been truncated

[github-actions]

Hi, thank you for creating your PR, we will check it out very soon

[github-actions]

Super-linter summary

Language	Validation result
BIOME_FORMAT	Pass ✅
BIOME_LINT	Pass ✅
CHECKOV	Pass ✅
GITHUB_ACTIONS	Pass ✅
GITHUB_ACTIONS_ZIZMOR	Fail ❌
GITLEAKS	Pass ✅
GIT_COMMITLINT	Pass ✅
GIT_MERGE_CONFLICT_MARKERS	Pass ✅
JSCPD	Pass ✅
PRE_COMMIT	Pass ✅
SPELL_CODESPELL	Pass ✅
TRIVY	Fail ❌
YAML	Pass ✅
YAML_PRETTIER	Pass ✅

Super-linter detected linting errors

For more information, see the GitHub Actions workflow run

Powered by Super-linter
Super-linter revision: 2da136927bd4a73596db63044b504547c62cb854
Super-linter version: 9.0.0

GITHUB_ACTIONS_ZIZMOR

�[1m�[96mhelp[self-repository]�[0m�[1m: use GitHub's dedicated self-repository syntax�[0m
  �[1m�[94m--> �[0m/github/workspace/.github/workflows/__main-ci.yml:22:11
   �[1m�[94m|�[0m
�[1m�[94m21�[0m �[1m�[94m|�[0m   ci:
   �[1m�[94m|�[0m   �[1m�[94m--�[0m �[1m�[94mthis job�[0m
�[1m�[94m22�[0m �[1m�[94m|�[0m     uses: ./.github/workflows/__shared-ci.yml
   �[1m�[94m|�[0m           �[1m�[96m^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^�[0m �[1m�[96muse '$/...' instead of './...'�[0m
   �[1m�[94m|�[0m
   �[1m�[94m= �[0m�[1mnote�[0m: audit confidence → High
   �[1m�[94m= �[0m�[1mnote�[0m: this finding has an auto-fix
   �[1m�[94m= �[0m�[1mhelp�[0m: audit documentation → �[32mhttps://docs.zizmor.sh/audits/#self-repository�[39m

�[1m�[96mhelp[self-repository]�[0m�[1m: use GitHub's dedicated self-repository syntax�[0m
  �[1m�[94m--> �[0m/github/workspace/.github/workflows/__main-ci.yml:40:11
   �[1m�[94m|�[0m
�[1m�[94m38�[0m �[1m�[94m|�[0m   clean:
   �[1m�[94m|�[0m   �[1m�[94m-----�[0m �[1m�[94mthis job�[0m
�[1m�[94m39�[0m �[1m�[94m|�[0m     needs: ci
�[1m�[94m40�[0m �[1m�[94m|�[0m     uses: ./.github/workflows/prune-pull-requests-images-tags.yml
   �[1m�[94m|�[0m           �[1m�[96m^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^�[0m �[1m�[96muse '$/...' instead of './...'�[0m
   �[1m�[94m|�[0m
   �[1m�[94m= �[0m�[1mnote�[0m: audit confidence → High
   �[1m�[94m= �[0m�[1mnote�[0m: this finding has an auto-fix
   �[1m�[94m= �[0m�[1mhelp�[0m: audit documentation → �[32mhttps://docs.zizmor.sh/audits/#self-repository�[39m

�[1m�[96mhelp[self-repository]�[0m�[1m: use GitHub's dedicated self-repository syntax�[0m
  �[1m�[94m--> �[0m/github/workspace/.github/workflows/__main-ci.yml:58:11
   �[1m�[94m|�[0m
�[1m�[94m56�[0m �[1m�[94m|�[0m   clean-with-cache:
   �[1m�[94m|�[0m   �[1m�[94m----------------�[0m �[1m�[94mthis job�[0m
�[1m�[94m57�[0m �[1m�[94m|�[0m     needs: ci
�[1m�[94m58�[0m �[1m�[94m|�[0m     uses: ./.github/workflows/prune-pull-requests-images-tags.yml
   �[1m�[94m|�[0m           �[1m�[96m^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^�[0m �[1m�[96muse '$/...' instead of './...'�[0m
   �[1m�[94m|�[0m
   �[1m�[94m= �[0m�[1mnote�[0m: audit confidence → High
   �[1m�[94m= �[0m�[1mnote�[0m: this finding has an auto-fix
   �[1m�[94m= �[0m�[1mhelp�[0m: audit documentation → �[32mhttps://docs.zizmor.sh/audits/#self-repository�[39m

�[1m�[96mhelp[self-repository]�[0m�[1m: use GitHub's dedicated self-repository syntax�[0m
  �[1m�[94m--> �[0m/github/workspace/.github/workflows/__main-ci.yml:85:15
   �[1m�[94m|�[0m
�[1m�[94m85�[0m �[1m�[94m|�[0m         - uses: ./actions/helm/generate-docs
   �[1m�[94m|�[0m           �[1m�[94m-�[0m     �[1m�[96m^^^^^^^^^^^^^^^^^^^^^^^^^^^^�[0m �[1m�[96muse '$/...' instead of './...'�[0m
   �[1m�[94m|�[0m �[1m�[94m _________|�[0m
   �[1m�[94m|�[0m �[1m�[94m|�[0m
�[1m�[94m86�[0m �[1m�[94m|�[0m �[1m�[94m|�[0m         with:
�[1m�[94m87�[0m �[1m�[94m|�[0m �[1m�[94m|�[0m           working-directory: ./tests/charts
�[1m�[94m88�[0m �[1m�[94m|�[0m �[1m�[94m|�[0m           github-app-client-id: ${{ vars.CI_BOT_APP_CLIENT_ID }}
�[1m�[94m89�[0m �[1m�[94m|�[0m �[1m�[94m|�[0m           github-app-key: ${{ secrets.CI_BOT_APP_PRIVATE_KEY }} # zizmor: ignore[secrets-outside-env]
   �[1m�[94m|�[0m �[1m�[94m|_____________________________________________________________________________________________________-�[0m �[1m�[94mthis step�[0m
   �[1m�[94m|�[0m
   �[1m�[94m= �[0m�[1mnote�[0m: audit confidence → High
   �[1m�[94m= �[0m�[1mnote�[0m: this finding has an auto-fix
   �[1m�[94m= �[0m�[1mhelp�[0m: audit documentation → �[32mhttps://docs.zizmor.sh/audits/#self-repository�[39m

�[1m�[96mhelp[self-repository]�[0m�[1m: use GitHub's dedicated self-repository syntax�[0m
  �[1m�[94m--> �[0m/github/workspace/.github/workflows/__shared-ci.yml:26:11
   �[1m�[94m|�[0m
�[1m�[94m24�[0m �[1m�[94m|�[0m   test-action-docker-build-image:
   �[1m�[94m|�[0m   �[1m�[94m------------------------------�[0m �[1m�[94mthis job�[0m
�[1m�[94m25�[0m �[1m�[94m|�[0m     needs: linter
�[1m�[94m26�[0m �[1m�[94m|�[0m     uses: ./.github/workflows/__test-action-docker-build-image.yml
   �[1m�[94m|�[0m           �[1m�[96m^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^�[0m �[1m�[96muse '$/...' instead of './...'�[0m
   �[1m�[94m|�[0m
   �[1m�[94m= �[0m�[1mnote�[0m: audit confidence → High
   �[1m�[94m= �[0m�[1mnote�[0m: this finding has an auto-fix
   �[1m�[94m= �[0m�[1mhelp�[0m: audit documentation → �[32mhttps://docs.zizmor.sh/audits/#self-repository�[39m

�[1m�[96mhelp[self-repository]�[0m�[1m: use GitHub's dedicated self-repository syntax�[0m
  �[1m�[94m--> �[0m/github/workspace/.github/workflows/__shared-ci.yml:33:11
   �[1m�[94m|�[0m
�[1m�[94m31�[0m �[1m�[94m|�[0m   test-action-docker-create-images-manifests:
   �[1m�[94m|�[0m   �[1m�[94m------------------------------------------�[0m �[1m�[94mthis job�[0m
�[1m�[94m32�[0m �[1m�[94m|�[0m     needs: linter
�[1m�[94m33�[0m �[1m�[94m|�[0m     uses: ./.github/workflows/__test-action-docker-create-images-manifests.yml
   �[1m�[94m|�[0m           �[1m�[96m^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^�[0m �[1m�[96muse '$/...' instead of './...'�[0m
   �[1m�[94m|�[0m
   �[1m�[94m= �[0m�[1mnote�[0m: audit confidence → High
   �[1m�[94m= �[0m�[1mnote�[0m: this finding has an auto-fix
   �[1m�[94m= �[0m�[1mhelp�[0m: audit documentation → �[32mhttps://docs.zizmor.sh/audits/#self-repository�[39m

�[1m�[96mhelp[self-repository]�[0m�[1m: use GitHub's dedicated self-repository syntax�[0m
  �[1m�[94m--> �[0m/github/workspace/.github/workflows/__shared-ci.yml:44:11
   �[1m�[94m|�[0m
�[1m�[94m42�[0m �[1m�[94m|�[0m   test-action-docker-setup:
   �[1m�[94m|�[0m   �[1m�[94m------------------------�[0m �[1m�[94mthis job�[0m
�[1m�[94m43�[0m �[1m�[94m|�[0m     needs: linter
�[1m�[94m44�[0m �[1m�[94m|�[0m     uses: ./.github/workflows/__test-action-docker-setup.yml
   �[1m�[94m|�[0m           �[1m�[96m^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^�[0m �[1m�[96muse '$/...' instead of './...'�[0m
   �[1m�[94m|�[0m
   �[1m�[94m= �[0m�[1mnote�[0m: audit confidence → High
   �[1m�[94m= �[0m�[1mnote�[0m: this finding has an auto-fix
   �[1m�[94m= �[0m�[1mhelp�[0m: audit documentation → �[32mhttps://docs.zizmor.sh/audits/#self-repository�[39m

�[1m�[96mhelp[self-repository]�[0m�[1m: use GitHub's dedicated self-repository syntax�[0m
  �[1m�[94m--> �[0m/github/workspace/.github/workflows/__shared-ci.yml:50:11
   �[1m�[94m|�[0m
�[1m�[94m48�[0m �[1m�[94m|�[0m   test-action-docker-prune-pull-requests-image-tags:
   �[1m�[94m|�[0m   �[1m�[94m-------------------------------------------------�[0m �[1m�[94mthis job�[0m
�[1m�[94m49�[0m �[1m�[94m|�[0m     needs: linter
�[1m�[94m50�[0m �[1m�[94m|�[0m     uses: ./.github/workflows/__test-action-docker-prune-pull-requests-image-tags.yml
   �[1m�[94m|�[0m           �[1m�[96m^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^�[0m �[1m�[96muse '$/...' instead of './...'�[0m
   �[1m�[94m|�[0m
   �[1m�[94m= �[0m�[1mnote�[0m: audit confidence → High
   �[1m�[94m= �[0m�[1mnote�[0m: this finding has an auto-fix
   �[1m�[94m= �[0m�[1mhelp�[0m: audit documentation → �[32mhttps://docs.zizmor.sh/audits/#self-repository�[39m

�[1m�[96mhelp[self-repository]�[0m�[1m: use GitHub's dedicated self-repository syntax�[0m
  �[1m�[94m--> �[0m/github/workspace/.github/workflows/__shared-ci.yml:61:11
   �[1m�[94m|�[0m
�[1m�[94m59�[0m �[1m�[94m|�[0m   test-action-get-image-metadata:
   �[1m�[94m|�[0m   �[1m�[94m------------------------------�[0m �[1m�[94mthis job�[0m
�[1m�[94m60�[0m �[1m�[94m|�[0m     needs: linter
�[1m�[94m61�[0m �[1m�[94m|�[0m     uses: ./.github/workflows/__test-action-get-image-metadata.yml
   �[1m�[94m|�[0m           �[1m�[96m^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^�[0m �[1m�[96muse '$/...' instead of './...'�[0m
   �[1m�[94m|�[0m
   �[1m�[94m= �[0m�[1mnote�[0m: audit confidence → High
   �[1m�[94m= �[0m�[1mnote�[0m: this finding has an auto-fix
   �[1m�[94m= �[0m�[1mhelp�[0m: audit documentation → �[32mhttps://docs.zizmor.sh/audits/#self-repository�[39m

�[1m�[96mhelp[self-repository]�[0m�[1m: use GitHub's dedicated self-repository syntax�[0m
  �[1m�[94m--> �[0m/github/workspace/.github/workflows/__shared-ci.yml:67:11
   �[1m�[94m|�[0m
�[1m�[94m65�[0m �[1m�[94m|�[0m   test-action-action-get-image-name:
   �[1m�[94m|�[0m   �[1m�[94m---------------------------------�[0m �[1m�[94mthis job�[0m
�[1m�[94m66�[0m �[1m�[94m|�[0m     needs: linter
�[1m�[94m67�[0m �[1m�[94m|�[0m     uses: ./.github/workflows/__test-action-get-image-name.yml
   �[1m�[94m|�[0m           �[1m�[96m^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^�[0m �[1m�[96muse '$/...' instead of './...'�[0m
   �[1m�[94m|�[0m
   �[1m�[94m= �[0m�[1mnote�[0m: audit confidence → High
   �[1m�[94m= �[0m�[1mnote�[0m: this finding has an auto-fix
   �[1m�[94m= �[0m�[1mhelp�[0m: audit documentation → �[32mhttps://docs.zizmor.sh/audits/#self-repository�[39m

�[1m�[96mhelp[self-repository]�[0m�[1m: use GitHub's dedicated self-repository syntax�[0m
  �[1m�[94m--> �[0m/github/workspace/.github/workflows/__shared-ci.yml:73:11
   �[1m�[94m|�[0m
�[1m�[94m71�[0m �[1m�[94m|�[0m   test-action-helm-parse-chart-uri:
   �[1m�[94m|�[0m   �[1m�[94m--------------------------------�[0m �[1m�[94mthis job�[0m
�[1m�[94m72�[0m �[1m�[94m|�[0m     needs: linter
�[1m�[94m73�[0m �[1m�[94m|�[0m     uses: ./.github/workflows/__test-action-helm-parse-chart-uri.yml
   �[1m�[94m|�[0m           �[1m�[96m^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^�[0m �[1m�[96muse '$/...' instead of './...'�[0m
   �[1m�[94m|�[0m
   �[1m�[94m= �[0m�[1mnote�[0m: audit confidence → High
   �[1m�[94m= �[0m�[1mnote�[0m: this finding has an auto-fix
   �[1m�[94m= �[0m�[1mhelp�[0m: audit documentation → �[32mhttps://docs.zizmor.sh/audits/#self-repository�[39m

�[1m�[96mhelp[self-repository]�[0m�[1m: use GitHub's dedicated self-repository syntax�[0m
  �[1m�[94m--> �[0m/github/workspace/.github/workflows/__shared-ci.yml:79:11
   �[1m�[94m|�[0m
�[1m�[94m77�[0m �[1m�[94m|�[0m   test-action-helm-sign-chart:
   �[1m�[94m|�[0m   �[1m�[94m---------------------------�[0m �[1m�[94mthis job�[0m
�[1m�[94m78�[0m �[1m�[94m|�[0m     needs: linter
�[1m�[94m79�[0m �[1m�[94m|�[0m     uses: ./.github/workflows/__test-action-helm-sign-chart.yml
   �[1m�[94m|�[0m           �[1m�[96m^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^�[0m �[1m�[96muse '$/...' instead of './...'�[0m
   �[1m�[94m|�[0m
   �[1m�[94m= �[0m�[1mnote�[0m: audit confidence → High
   �[1m�[94m= �[0m�[1mnote�[0m: this finding has an auto-fix
   �[1m�[94m= �[0m�[1mhelp�[0m: audit documentation → �[32mhttps://docs.zizmor.sh/audits/#self-repository�[39m

�[1m�[96mhelp[self-repository]�[0m�[1m: use GitHub's dedicated self-repository syntax�[0m
  �[1m�[94m--> �[0m/github/workspace/.github/workflows/__shared-ci.yml:87:11
   �[1m�[94m|�[0m
�[1m�[94m85�[0m �[1m�[94m|�[0m   test-action-helm-update-chart-values:
   �[1m�[94m|�[0m   �[1m�[94m------------------------------------�[0m �[1m�[94mthis job�[0m
�[1m�[94m86�[0m �[1m�[94m|�[0m     needs: linter
�[1m�[94m87�[0m �[1m�[94m|�[0m     uses: ./.github/workflows/__test-action-helm-update-chart-values.yml
   �[1m�[94m|�[0m           �[1m�[96m^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^�[0m �[1m�[96muse '$/...' instead of './...'�[0m
   �[1m�[94m|�[0m
   �[1m�[94m= �[0m�[1mnote�[0m: audit confidence → High
   �[1m�[94m= �[0m�[1mnote�[0m: this finding has an auto-fix
   �[1m�[94m= �[0m�[1mhelp�[0m: audit documentation → �[32mhttps://docs.zizmor.sh/audits/#self-repository�[39m

�[1m�[96mhelp[self-repository]�[0m�[1m: use GitHub's dedicated self-repository syntax�[0m
  �[1m�[94m--> �[0m/github/workspace/.github/workflows/__shared-ci.yml:93:11
   �[1m�[94m|�[0m
�[1m�[94m91�[0m �[1m�[94m|�[0m   test-action-helm-release-chart:
   �[1m�[94m|�[0m   �[1m�[94m------------------------------�[0m �[1m�[94mthis job�[0m
�[1m�[94m92�[0m �[1m�[94m|�[0m     needs: linter
�[1m�[94m93�[0m �[1m�[94m|�[0m     uses: ./.github/workflows/__test-action-helm-release-chart.yml
   �[1m�[94m|�[0m           �[1m�[96m^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^�[0m �[1m�[96muse '$/...' instead of './...'�[0m
   �[1m�[94m|�[0m
   �[1m�[94m= �[0m�[1mnote�[0m: audit confidence → High
   �[1m�[94m= �[0m�[1mnote�[0m: this finding has an auto-fix
   �[1m�[94m= �[0m�[1mhelp�[0m: audit documentation → �[32mhttps://docs.zizmor.sh/audits/#self-repository�[39m

�[1m�[96mhelp[self-repository]�[0m�[1m: use GitHub's dedicated self-repository syntax�[0m
   �[1m�[94m--> �[0m/github/workspace/.github/workflows/__shared-ci.yml:101:11
    �[1m�[94m|�[0m
�[1m�[94m 99�[0m �[1m�[94m|�[0m   test-action-helm-test-chart:
    �[1m�[94m|�[0m   �[1m�[94m---------------------------�[0m �[1m�[94mthis job�[0m
�[1m�[94m100�[0m �[1m�[94m|�[0m     needs: linter
�[1m�[94m101�[0m �[1m�[94m|�[0m     uses: ./.github/workflows/__test-action-helm-test-chart.yml
    �[1m�[94m|�[0m           �[1m�[96m^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^�[0m �[1m�[96muse '$/...' instead of './...'�[0m
    �[1m�[94m|�[0m
    �[1m�[94m= �[0m�[1mnote�[0m: audit confidence → High
    �[1m�[94m= �[0m�[1mnote�[0m: this finding has an auto-fix
    �[1m�[94m= �[0m�[1mhelp�[0m: audit documentation → �[32mhttps://docs.zizmor.sh/audits/#self-repository�[39m

�[1m�[96mhelp[self-repository]�[0m�[1m: use GitHub's dedicated self-repository syntax�[0m
   �[1m�[94m--> �[0m/github/workspace/.github/workflows/__shared-ci.yml:113:11
    �[1m�[94m|�[0m
�[1m�[94m111�[0m �[1m�[94m|�[0m     name: Test docker build images - Building
    �[1m�[94m|�[0m     �[1m�[94m-----------------------------------------�[0m �[1m�[94mthis job�[0m
�[1m�[94m112�[0m �[1m�[94m|�[0m     needs: linter
�[1m�[94m113�[0m �[1m�[94m|�[0m     uses: ./.github/workflows/__test-workflow-docker-build-images-building.yml
    �[1m�[94m|�[0m           �[1m�[96m^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^�[0m �[1m�[96muse '$/...' instead of './...'�[0m
    �[1m�[94m|�[0m
    �[1m�[94m= �[0m�[1mnote�[0m: audit confidence → High
    �[1m�[94m= �[0m�[1mnote�[0m: this finding has an auto-fix
    �[1m�[94m= �[0m�[1mhelp�[0m: audit documentation → �[32mhttps://docs.zizmor.sh/audits/#self-repository�[39m

�[1m�[96mhelp[self-repository]�[0m�[1m: use GitHub's dedicated self-repository syntax�[0m
   �[1m�[94m--> �[0m/github/workspace/.github/workflows/__shared-ci.yml:127:11
    �[1m�[94m|�[0m
�[1m�[94m125�[0m �[1m�[94m|�[0m     name: Test docker build images - Caching
    �[1m�[94m|�[0m     �[1m�[94m----------------------------------------�[0m �[1m�[94mthis job�[0m
�[1m�[94m126�[0m �[1m�[94m|�[0m     needs: linter
�[1m�[94m127�[0m �[1m�[94m|�[0m     uses: ./.github/workflows/__test-workflow-docker-build-images-caching.yml
    �[1m�[94m|�[0m           �[1m�[96m^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^�[0m �[1m�[96muse '$/...' instead of './...'�[0m
    �[1m�[94m|�[0m
    �[1m�[94m= �[0m�[1mnote�[0m: audit confidence → High
    �[1m�[94m= �[0m�[1mnote�[0m: this finding has an auto-fix
    �[1m�[94m= �[0m�[1mhelp�[0m: audit documentation → �[32mhttps://docs.zizmor.sh/audits/#self-repository�[39m

�[1m�[96mhelp[self-repository]�[0m�[1m: use GitHub's dedicated self-repository syntax�[0m
   �[1m�[94m--> �[0m/github/workspace/.github/workflows/__shared-ci.yml:141:11
    �[1m�[94m|�[0m
�[1m�[94m139�[0m �[1m�[94m|�[0m     name: Test docker build images - Multi registry inputs
    �[1m�[94m|�[0m     �[1m�[94m------------------------------------------------------�[0m �[1m�[94mthis job�[0m
�[1m�[94m140�[0m �[1m�[94m|�[0m     needs: linter
�[1m�[94m141�[0m �[1m�[94m|�[0m     uses: ./.github/workflows/__test-workflow-docker-build-images-multi-registry.yml
    �[1m�[94m|�[0m           �[1m�[96m^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^�[0m �[1m�[96muse '$/...' instead of './...'�[0m
    �[1m�[94m|�[0m
    �[1m�[94m= �[0m�[1mnote�[0m: audit confidence → High
    �[1m�[94m= �[0m�[1mnote�[0m: this finding has an auto-fix
    �[1m�[94m= �[0m�[1mhelp�[0m: audit documentation → �[32mhttps://docs.zizmor.sh/audits/#self-repository�[39m

�[1m�[96mhelp[self-repository]�[0m�[1m: use GitHub's dedicated self-repository syntax�[0m
   �[1m�[94m--> �[0m/github/workspace/.github/workflows/__shared-ci.yml:155:11
    �[1m�[94m|�[0m
�[1m�[94m153�[0m �[1m�[94m|�[0m     name: Test docker build images - Platforms and Signing
    �[1m�[94m|�[0m     �[1m�[94m------------------------------------------------------�[0m �[1m�[94mthis job�[0m
�[1m�[94m154�[0m �[1m�[94m|�[0m     needs: linter
�[1m�[94m155�[0m �[1m�[94m|�[0m     uses: ./.github/workflows/__test-workflow-docker-build-images-platforms-and-signing.yml
    �[1m�[94m|�[0m           �[1m�[96m^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^�[0m �[1m�[96muse '$/...' instead of './...'�[0m
    �[1m�[94m|�[0m
    �[1m�[94m= �[0m�[1mnote�[0m: audit confidence → High
    �[1m�[94m= �[0m�[1mnote�[0m: this finding has an auto-fix
    �[1m�[94m= �[0m�[1mhelp�[0m: audit documentation → �[32mhttps://docs.zizmor.sh/audits/#self-repository�[39m

�[1m�[96mhelp[self-repository]�[0m�[1m: use GitHub's dedicated self-repository syntax�[0m
   �[1m�[94m--> �[0m/github/workspace/.github/workflows/__shared-ci.yml:169:11
    �[1m�[94m|�[0m
�[1m�[94m167�[0m �[1m�[94m|�[0m     name: Test docker build images - Attestation
    �[1m�[94m|�[0m     �[1m�[94m--------------------------------------------�[0m �[1m�[94mthis job�[0m
�[1m�[94m168�[0m �[1m�[94m|�[0m     needs: linter
�[1m�[94m169�[0m �[1m�[94m|�[0m     uses: ./.github/workflows/__test-workflow-docker-build-images-attestation.yml
    �[1m�[94m|�[0m           �[1m�[96m^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^�[0m �[1m�[96muse '$/...' instead of './...'�[0m
    �[1m�[94m|�[0m
    �[1m�[94m= �[0m�[1mnote�[0m: audit confidence → High
    �[1m�[94m= �[0m�[1mnote�[0m: this finding has an auto-fix
    �[1m�[94m= �[0m�[1mhelp�[0m: audit documentation → �[32mhttps://docs.zizmor.sh/audits/#self-repository�[39m

�[1m�[96mhelp[self-repository]�[0m�[1m: use GitHub's dedicated self-repository syntax�[0m
  �[1m�[94m--> �[0m/github/workspace/.github/workflows/__test-action-docker-build-image.yml:42:15
   �[1m�[94m|�[0m
�[1m�[94m40�[0m �[1m�[94m|�[0m       - name: Act - Build image
   �[1m�[94m|�[0m         �[1m�[94m-----------------------�[0m �[1m�[94mthis step�[0m
�[1m�[94m41�[0m �[1m�[94m|�[0m         id: build-image
�[1m�[94m42�[0m �[1m�[94m|�[0m         uses: ./actions/docker/build-image
   �[1m�[94m|�[0m               �[1m�[96m^^^^^^^^^^^^^^^^^^^^^^^^^^^^�[0m �[1m�[96muse '$/...' instead of './...'�[0m
   �[1m�[94m|�[0m
   �[1m�[94m= �[0m�[1mnote�[0m: audit confidence → High
   �[1m�[94m= �[0m�[1mnote�[0m: this finding has an auto-fix
   �[1m�[94m= �[0m�[1mhelp�[0m: audit documentation → �[32mhttps://docs.zizmor.sh/audits/#self-repository�[39m

�[1m�[96mhelp[self-repository]�[0m�[1m: use GitHub's dedicated self-repository syntax�[0m
   �[1m�[94m--> �[0m/github/workspace/.github/workflows/__test-action-docker-build-image.yml:208:15
    �[1m�[94m|�[0m
�[1m�[94m206�[0m �[1m�[94m|�[0m       - name: Act - Build image
    �[1m�[94m|�[0m         �[1m�[94m-----------------------�[0m �[1m�[94mthis step�[0m
�[1m�[94m207�[0m �[1m�[94m|�[0m         id: build-image
�[1m�[94m208�[0m �[1m�[94m|�[0m         uses: ./actions/docker/build-image
    �[1m�[94m|�[0m               �[1m�[96m^^^^^^^^^^^^^^^^^^^^^^^^^^^^�[0m �[1m�[96muse '$/...' instead of './...'�[0m
    �[1m�[94m|�[0m
    �[1m�[94m= �[0m�[1mnote�[0m: audit confidence → High
    �[1m�[94m= �[0m�[1mnote�[0m: this finding has an auto-fix
    �[1m�[94m= �[0m�[1mhelp�[0m: audit documentation → �[32mhttps://docs.zizmor.sh/audits/#self-repository�[39m

�[1m�[96mhelp[self-repository]�[0m�[1m: use GitHub's dedicated self-repository syntax�[0m
   �[1m�[94m--> �[0m/github/workspace/.github/workflows/__test-action-docker-build-image.yml:294:15
    �[1m�[94m|�[0m
�[1m�[94m292�[0m �[1m�[94m|�[0m       - name: Act - Build image
    �[1m�[94m|�[0m         �[1m�[94m-----------------------�[0m �[1m�[94mthis step�[0m
�[1m�[94m293�[0m �[1m�[94m|�[0m         id: build-image
�[1m�[94m294�[0m �[1m�[94m|�[0m         uses: ./actions/docker/build-image
    �[1m�[94m|�[0m               �[1m�[96m^^^^^^^^^^^^^^^^^^^^^^^^^^^^�[0m �[1m�[96muse '$/...' instead of './...'�[0m
    �[1m�[94m|�[0m
    �[1m�[94m= �[0m�[1mnote�[0m: audit confidence → High
    �[1m�[94m= �[0m�[1mnote�[0m: this finding has an auto-fix
    �[1m�[94m= �[0m�[1mhelp�[0m: audit documentation → �[32mhttps://docs.zizmor.sh/audits/#self-repository�[39m

�[1m�[96mhelp[self-repository]�[0m�[1m: use GitHub's dedicated self-repository syntax�[0m
   �[1m�[94m--> �[0m/github/workspace/.github/workflows/__test-action-docker-build-image.yml:392:15
    �[1m�[94m|�[0m
�[1m�[94m390�[0m �[1m�[94m|�[0m       - name: Act - Build image
    �[1m�[94m|�[0m         �[1m�[94m-----------------------�[0m �[1m�[94mthis step�[0m
�[1m�[94m391�[0m �[1m�[94m|�[0m         id: build-image
�[1m�[94m392�[0m �[1m�[94m|�[0m         uses: ./actions/docker/build-image
    �[1m�[94m|�[0m               �[1m�[96m^^^^^^^^^^^^^^^^^^^^^^^^^^^^�[0m �[1m�[96muse '$/...' instead of './...'�[0m
    �[1m�[94m|�[0m
    �[1m�[94m= �[0m�[1mnote�[0m: audit confidence → High
    �[1m�[94m= �[0m�[1mnote�[0m: this finding has an auto-fix
    �[1m�[94m= �[0m�[1mhelp�[0m: audit documentation → �[32mhttps://docs.zizmor.sh/audits/#self-repository�[39m

�[1m�[96mhelp[self-repository]�[0m�[1m: use GitHub's dedicated self-repository syntax�[0m
  �[1m�[94m--> �[0m/github/workspace/.github/workflows/__test-action-helm-release-chart.yml:60:15
   �[1m�[94m|�[0m
�[1m�[94m59�[0m �[1m�[94m|�[0m       - id: release-chart
   �[1m�[94m|�[0m         �[1m�[94m-----------------�[0m �[1m�[94mthis step�[0m
�[1m�[94m60�[0m �[1m�[94m|�[0m         uses: ./actions/helm/release-chart
   �[1m�[94m|�[0m               �[1m�[96m^^^^^^^^^^^^^^^^^^^^^^^^^^^^�[0m �[1m�[96muse '$/...' instead of './...'�[0m
   �[1m�[94m|�[0m
   �[1m�[94m= �[0m�[1mnote�[0m: audit confidence → High
   �[1m�[94m= �[0m�[1mnote�[0m: this finding has an auto-fix
   �[1m�[94m= �[0m�[1mhelp�[0m: audit documentation → �[32mhttps://docs.zizmor.sh/audits/#self-repository�[39m

�[1m�[96mhelp[self-repository]�[0m�[1m: use GitHub's dedicated self-repository syntax�[0m
   �[1m�[94m--> �[0m/github/workspace/.github/workflows/__test-action-helm-release-chart.yml:159:15
    �[1m�[94m|�[0m
�[1m�[94m158�[0m �[1m�[94m|�[0m       - id: release-chart
    �[1m�[94m|�[0m         �[1m�[94m-----------------�[0m �[1m�[94mthis step�[0m
�[1m�[94m159�[0m �[1m�[94m|�[0m         uses: ./actions/helm/release-chart
    �[1m�[94m|�[0m               �[1m�[96m^^^^^^^^^^^^^^^^^^^^^^^^^^^^�[0m �[1m�[96muse '$/...' instead of './...'�[0m
    �[1m�[94m|�[0m
    �[1m�[94m= �[0m�[1mnote�[0m: audit confidence → High
    �[1m�[94m= �[0m�[1mnote�[0m: this finding has an auto-fix
    �[1m�[94m= �[0m�[1mhelp�[0m: audit documentation → �[32mhttps://docs.zizmor.sh/audits/#self-repository�[39m

�[1m�[96mhelp[self-repository]�[0m�[1m: use GitHub's dedicated self-repository syntax�[0m
  �[1m�[94m--> �[0m/github/workspace/.github/workflows/__test-action-helm-sign-chart.yml:31:15
   �[1m�[94m|�[0m
�[1m�[94m30�[0m �[1m�[94m|�[0m       - id: release-chart
   �[1m�[94m|�[0m         �[1m�[94m-----------------�[0m �[1m�[94mthis step�[0m
�[1m�[94m31�[0m �[1m�[94m|�[0m         uses: ./actions/helm/release-chart
   �[1m�[94m|�[0m               �[1m�[96m^^^^^^^^^^^^^^^^^^^^^^^^^^^^�[0m �[1m�[96muse '$/...' instead of './...'�[0m
   �[1m�[94m|�[0m
   �[1m�[94m= �[0m�[1mnote�[0m: audit confidence → High
   �[1m�[94m= �[0m�[1mnote�[0m: this finding has an auto-fix
   �[1m�[94m= �[0m�[1mhelp�[0m: audit documentation → �[32mhttps://docs.zizmor.sh/audits/#self-repository�[39m

�[1m�[96mhelp[self-repository]�[0m�[1m: use GitHub's dedicated self-repository syntax�[0m
  �[1m�[94m--> �[0m/github/workspace/.github/workflows/__test-action-helm-sign-chart.yml:81:15
   �[1m�[94m|�[0m
�[1m�[94m80�[0m �[1m�[94m|�[0m       - name: Act - Sign chart
   �[1m�[94m|�[0m         �[1m�[94m----------------------�[0m �[1m�[94mthis step�[0m
�[1m�[94m81�[0m �[1m�[94m|�[0m         uses: ./actions/helm/sign-chart
   �[1m�[94m|�[0m               �[1m�[96m^^^^^^^^^^^^^^^^^^^^^^^^^�[0m �[1m�[96muse '$/...' instead of './...'�[0m
   �[1m�[94m|�[0m
   �[1m�[94m= �[0m�[1mnote�[0m: audit confidence → High
   �[1m�[94m= �[0m�[1mnote�[0m: this finding has an auto-fix
   �[1m�[94m= �[0m�[1mhelp�[0m: audit documentation → �[32mhttps://docs.zizmor.sh/audits/#self-repository�[39m

�[1m�[96mhelp[self-repository]�[0m�[1m: use GitHub's dedicated self-repository syntax�[0m
   �[1m�[94m--> �[0m/github/workspace/.github/workflows/docker-build-images.yml:464:15
    �[1m�[94m|�[0m
�[1m�[94m463�[0m �[1m�[94m|�[0m       - id: build
    �[1m�[94m|�[0m         �[1m�[94m---------�[0m �[1m�[94mthis step�[0m
�[1m�[94m464�[0m �[1m�[94m|�[0m         uses: ./../self-workflow/actions/docker/build-image
    �[1m�[94m|�[0m               �[1m�[96m^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^�[0m �[1m�[96muse '$/...' instead of './...'�[0m
    �[1m�[94m|�[0m
    �[1m�[94m= �[0m�[1mnote�[0m: audit confidence → High
    �[1m�[94m= �[0m�[1mnote�[0m: this finding has an auto-fix
    �[1m�[94m= �[0m�[1mhelp�[0m: audit documentation → �[32mhttps://docs.zizmor.sh/audits/#self-repository�[39m

�[1m�[96mhelp[self-repository]�[0m�[1m: use GitHub's dedicated self-repository syntax�[0m
   �[1m�[94m--> �[0m/github/workspace/.github/workflows/docker-build-images.yml:547:15
    �[1m�[94m|�[0m
�[1m�[94m546�[0m �[1m�[94m|�[0m       - id: create-images-manifests
    �[1m�[94m|�[0m         �[1m�[94m---------------------------�[0m �[1m�[94mthis step�[0m
�[1m�[94m547�[0m �[1m�[94m|�[0m         uses: ./../self-workflow/actions/docker/create-images-manifests
    �[1m�[94m|�[0m               �[1m�[96m^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^�[0m �[1m�[96muse '$/...' instead of './...'�[0m
    �[1m�[94m|�[0m
    �[1m�[94m= �[0m�[1mnote�[0m: audit confidence → High
    �[1m�[94m= �[0m�[1mnote�[0m: this finding has an auto-fix
    �[1m�[94m= �[0m�[1mhelp�[0m: audit documentation → �[32mhttps://docs.zizmor.sh/audits/#self-repository�[39m

�[1m�[96mhelp[self-repository]�[0m�[1m: use GitHub's dedicated self-repository syntax�[0m
   �[1m�[94m--> �[0m/github/workspace/.github/workflows/docker-build-images.yml:573:15
    �[1m�[94m|�[0m
�[1m�[94m573�[0m �[1m�[94m|�[0m         - uses: ./../self-workflow/actions/docker/sign-images
    �[1m�[94m|�[0m           �[1m�[94m-�[0m     �[1m�[96m^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^�[0m �[1m�[96muse '$/...' instead of './...'�[0m
    �[1m�[94m|�[0m �[1m�[94m _________|�[0m
    �[1m�[94m|�[0m �[1m�[94m|�[0m
�[1m�[94m574�[0m �[1m�[94m|�[0m �[1m�[94m|�[0m         if: steps.get-images-to-sign.outputs.images-to-sign
�[1m�[94m575�[0m �[1m�[94m|�[0m �[1m�[94m|�[0m         with:
�[1m�[94m576�[0m �[1m�[94m|�[0m �[1m�[94m|�[0m           images: ${{ steps.get-images-to-sign.outputs.images-to-sign }}
�[1m�[94m577�[0m �[1m�[94m|�[0m �[1m�[94m|�[0m           github-token: ${{ secrets.GITHUB_TOKEN }}
    �[1m�[94m|�[0m �[1m�[94m|___________________________________________________-�[0m �[1m�[94mthis step�[0m
    �[1m�[94m|�[0m
    �[1m�[94m= �[0m�[1mnote�[0m: audit confidence → High
    �[1m�[94m= �[0m�[1mnote�[0m: this finding has an auto-fix
    �[1m�[94m= �[0m�[1mhelp�[0m: audit documentation → �[32mhttps://docs.zizmor.sh/audits/#self-repository�[39m

�[1m�[96mhelp[self-repository]�[0m�[1m: use GitHub's dedicated self-repository syntax�[0m
   �[1m�[94m--> �[0m/github/workspace/.github/workflows/docker-build-images.yml:629:15
    �[1m�[94m|�[0m
�[1m�[94m629�[0m �[1m�[94m|�[0m         - uses: ./../self-workflow/actions/docker/setup
    �[1m�[94m|�[0m           �[1m�[94m-�[0m     �[1m�[96m^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^�[0m �[1m�[96muse '$/...' instead of './...'�[0m
    �[1m�[94m|�[0m �[1m�[94m _________|�[0m
    �[1m�[94m|�[0m �[1m�[94m|�[0m
�[1m�[94m630�[0m �[1m�[94m|�[0m �[1m�[94m|�[0m         with:
�[1m�[94m631�[0m �[1m�[94m|�[0m �[1m�[94m|�[0m           oci-registry: ${{ inputs.oci-registry }}
�[1m�[94m632�[0m �[1m�[94m|�[0m �[1m�[94m|�[0m           oci-registry-username: ${{ inputs.oci-registry-username }}
�[1m�[94m633�[0m �[1m�[94m|�[0m �[1m�[94m|�[0m           oci-registry-password: ${{ secrets.oci-registry-password }} # zizmor: ignore[secrets-outside-env]
�[1m�[94m634�[0m �[1m�[94m|�[0m �[1m�[94m|�[0m           built-images: ${{ needs.publish-manifests.outputs.built-images }}
�[1m�[94m635�[0m �[1m�[94m|�[0m �[1m�[94m|�[0m           setup-buildx: false
    �[1m�[94m|�[0m �[1m�[94m|_____________________________-�[0m �[1m�[94mthis step�[0m
    �[1m�[94m|�[0m
    �[1m�[94m= �[0m�[1mnote�[0m: audit confidence → High
    �[1m�[94m= �[0m�[1mnote�[0m: this finding has an auto-fix
    �[1m�[94m= �[0m�[1mhelp�[0m: audit documentation → �[32mhttps://docs.zizmor.sh/audits/#self-repository�[39m

�[1m�[96mhelp[self-repository]�[0m�[1m: use GitHub's dedicated self-repository syntax�[0m
   �[1m�[94m--> �[0m/github/workspace/.github/workflows/docker-build-images.yml:637:15
    �[1m�[94m|�[0m
�[1m�[94m637�[0m �[1m�[94m|�[0m         - uses: ./../self-workflow/actions/docker/attest-image
    �[1m�[94m|�[0m           �[1m�[94m-�[0m     �[1m�[96m^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^�[0m �[1m�[96muse '$/...' instead of './...'�[0m
    �[1m�[94m|�[0m �[1m�[94m _________|�[0m
    �[1m�[94m|�[0m �[1m�[94m|�[0m
�[1m�[94m638�[0m �[1m�[94m|�[0m �[1m�[94m|�[0m         with:
�[1m�[94m639�[0m �[1m�[94m|�[0m �[1m�[94m|�[0m           image: ${{ matrix.image }}
�[1m�[94m640�[0m �[1m�[94m|�[0m �[1m�[94m|�[0m           github-token: ${{ secrets.GITHUB_TOKEN }}
    �[1m�[94m|�[0m �[1m�[94m|____________________________________________________-�[0m �[1m�[94mthis step�[0m
    �[1m�[94m|�[0m
    �[1m�[94m= �[0m�[1mnote�[0m: audit confidence → High
    �[1m�[94m= �[0m�[1mnote�[0m: this finding has an auto-fix
    �[1m�[94m= �[0m�[1mhelp�[0m: audit documentation → �[32mhttps://docs.zizmor.sh/audits/#self-repository�[39m

�[1m�[96mhelp[self-repository]�[0m�[1m: use GitHub's dedicated self-repository syntax�[0m
   �[1m�[94m--> �[0m/github/workspace/.github/workflows/prune-pull-requests-images-tags.yml:161:15
    �[1m�[94m|�[0m
�[1m�[94m160�[0m �[1m�[94m|�[0m       - id: build
    �[1m�[94m|�[0m         �[1m�[94m---------�[0m �[1m�[94mthis step�[0m
�[1m�[94m161�[0m �[1m�[94m|�[0m         uses: ./../self-workflow/actions/docker/prune-pull-requests-image-tags
    �[1m�[94m|�[0m               �[1m�[96m^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^�[0m �[1m�[96muse '$/...' instead of './...'�[0m
    �[1m�[94m|�[0m
    �[1m�[94m= �[0m�[1mnote�[0m: audit confidence → High
    �[1m�[94m= �[0m�[1mnote�[0m: this finding has an auto-fix
    �[1m�[94m= �[0m�[1mhelp�[0m: audit documentation → �[32mhttps://docs.zizmor.sh/audits/#self-repository�[39m

�[1m�[96mhelp[self-repository]�[0m�[1m: use GitHub's dedicated self-repository syntax�[0m
   �[1m�[94m--> �[0m/github/workspace/actions/docker/build-image/action.yml:164:13
    �[1m�[94m|�[0m
�[1m�[94m163�[0m �[1m�[94m|�[0m     - id: docker-setup
    �[1m�[94m|�[0m       �[1m�[94m----------------�[0m �[1m�[94mthis step�[0m
�[1m�[94m164�[0m �[1m�[94m|�[0m       uses: ./../self-actions/docker/setup
    �[1m�[94m|�[0m             �[1m�[96m^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^�[0m �[1m�[96muse '$/...' instead of './...'�[0m
    �[1m�[94m|�[0m
    �[1m�[94m= �[0m�[1mnote�[0m: audit confidence → High
    �[1m�[94m= �[0m�[1mnote�[0m: this finding has an auto-fix
    �[1m�[94m= �[0m�[1mhelp�[0m: audit documentation → �[32mhttps://docs.zizmor.sh/audits/#self-repository�[39m

�[1m�[96mhelp[self-repository]�[0m�[1m: use GitHub's dedicated self-repository syntax�[0m
   �[1m�[94m--> �[0m/github/workspace/actions/docker/build-image/action.yml:172:13
    �[1m�[94m|�[0m
�[1m�[94m171�[0m �[1m�[94m|�[0m     - id: metadata
    �[1m�[94m|�[0m       �[1m�[94m------------�[0m �[1m�[94mthis step�[0m
�[1m�[94m172�[0m �[1m�[94m|�[0m       uses: ./../self-actions/docker/get-image-metadata
    �[1m�[94m|�[0m             �[1m�[96m^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^�[0m �[1m�[96muse '$/...' instead of './...'�[0m
    �[1m�[94m|�[0m
    �[1m�[94m= �[0m�[1mnote�[0m: audit confidence → High
    �[1m�[94m= �[0m�[1mnote�[0m: this finding has an auto-fix
    �[1m�[94m= �[0m�[1mhelp�[0m: audit documentation → �[32mhttps://docs.zizmor.sh/audits/#self-repository�[39m

�[1m�[96mhelp[self-repository]�[0m�[1m: use GitHub's dedicated self-repository syntax�[0m
   �[1m�[94m--> �[0m/github/workspace/actions/docker/build-image/action.yml:371:13
    �[1m�[94m|�[0m
�[1m�[94m368�[0m �[1m�[94m|�[0m     - id: build
    �[1m�[94m|�[0m       �[1m�[94m---------�[0m �[1m�[94mthis step�[0m
�[1m�[94m...�[0m
�[1m�[94m371�[0m �[1m�[94m|�[0m       uses: ./../self-actions/docker/build-image/internal
    �[1m�[94m|�[0m             �[1m�[96m^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^�[0m �[1m�[96muse '$/...' instead of './...'�[0m
    �[1m�[94m|�[0m
    �[1m�[94m= �[0m�[1mnote�[0m: audit confidence → High
    �[1m�[94m= �[0m�[1mnote�[0m: this finding has an auto-fix
    �[1m�[94m= �[0m�[1mhelp�[0m: audit documentation → �[32mhttps://docs.zizmor.sh/audits/#self-repository�[39m

�[1m�[96mhelp[self-repository]�[0m�[1m: use GitHub's dedicated self-repository syntax�[0m
   �[1m�[94m--> �[0m/github/workspace/actions/helm/release-chart/action.yml:191:13
    �[1m�[94m|�[0m
�[1m�[94m191�[0m �[1m�[94m|�[0m       - uses: ./../self-actions-release-chart/helm/update-chart-values
    �[1m�[94m|�[0m         �[1m�[94m-�[0m     �[1m�[96m^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^�[0m �[1m�[96muse '$/...' instead of './...'�[0m
    �[1m�[94m|�[0m �[1m�[94m _______|�[0m
    �[1m�[94m|�[0m �[1m�[94m|�[0m
�[1m�[94m192�[0m �[1m�[94m|�[0m �[1m�[94m|�[0m       with:
�[1m�[94m193�[0m �[1m�[94m|�[0m �[1m�[94m|�[0m         path: ${{ inputs.path }}
�[1m�[94m194�[0m �[1m�[94m|�[0m �[1m�[94m|�[0m         values: ${{ steps.chart-tag-updates.outputs.values }}
    �[1m�[94m|�[0m �[1m�[94m|_____________________________________________________________-�[0m �[1m�[94mthis step�[0m
    �[1m�[94m|�[0m
    �[1m�[94m= �[0m�[1mnote�[0m: audit confidence → High
    �[1m�[94m= �[0m�[1mnote�[0m: this finding has an auto-fix
    �[1m�[94m= �[0m�[1mhelp�[0m: audit documentation → �[32mhttps://docs.zizmor.sh/audits/#self-repository�[39m

�[1m�[96mhelp[self-repository]�[0m�[1m: use GitHub's dedicated self-repository syntax�[0m
   �[1m�[94m--> �[0m/github/workspace/actions/helm/release-chart/action.yml:298:13
    �[1m�[94m|�[0m
�[1m�[94m297�[0m �[1m�[94m|�[0m     - name: Prepare chart dependencies
    �[1m�[94m|�[0m       �[1m�[94m--------------------------------�[0m �[1m�[94mthis step�[0m
�[1m�[94m298�[0m �[1m�[94m|�[0m       uses: ./../self-actions-release-chart/helm/prepare-chart
    �[1m�[94m|�[0m             �[1m�[96m^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^�[0m �[1m�[96muse '$/...' instead of './...'�[0m
    �[1m�[94m|�[0m
    �[1m�[94m= �[0m�[1mnote�[0m: audit confidence → High
    �[1m�[94m= �[0m�[1mnote�[0m: this finding has an auto-fix
    �[1m�[94m= �[0m�[1mhelp�[0m: audit documentation → �[32mhttps://docs.zizmor.sh/audits/#self-repository�[39m

�[1m�[96mhelp[self-repository]�[0m�[1m: use GitHub's dedicated self-repository syntax�[0m
   �[1m�[94m--> �[0m/github/workspace/actions/helm/release-chart/action.yml:366:13
    �[1m�[94m|�[0m
�[1m�[94m364�[0m �[1m�[94m|�[0m     - name: Sign chart digest
    �[1m�[94m|�[0m       �[1m�[94m-----------------------�[0m �[1m�[94mthis step�[0m
�[1m�[94m365�[0m �[1m�[94m|�[0m       if: inputs.sign == 'true'
�[1m�[94m366�[0m �[1m�[94m|�[0m       uses: ./../self-actions-release-chart/helm/sign-chart
    �[1m�[94m|�[0m             �[1m�[96m^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^�[0m �[1m�[96muse '$/...' instead of './...'�[0m
    �[1m�[94m|�[0m
    �[1m�[94m= �[0m�[1mnote�[0m: audit confidence → High
    �[1m�[94m= �[0m�[1mnote�[0m: this finding has an auto-fix
    �[1m�[94m= �[0m�[1mhelp�[0m: audit documentation → �[32mhttps://docs.zizmor.sh/audits/#self-repository�[39m

�[32m81�[39m findings (�[1m�[93m41�[39m suppressed, �[91m40�[39m unsafe fixes�[0m): �[35m0�[39m informational, �[36m40�[39m low, �[33m0�[39m medium, �[31m0�[39m high�[32m INFO�[0m �[2mzizmor�[0m�[2m:�[0m 🌈 zizmor v1.30.1
�[32m INFO�[0m �[1maudit�[0m�[2m:�[0m �[2mzizmor�[0m�[2m:�[0m 🌈 completed /github/workspace/.github/workflows/__greetings.yml
�[32m INFO�[0m �[1maudit�[0m�[2m:�[0m �[2mzizmor�[0m�[2m:�[0m 🌈 completed /github/workspace/.github/workflows/__main-ci.yml
�[32m INFO�[0m �[1maudit�[0m�[2m:�[0m �[2mzizmor�[0m�[2m:�[0m 🌈 completed /github/workspace/.github/workflows/__need-fix-to-issue.yml
�[32m INFO�[0m �[1maudit�[0m�[2m:�[0m �[2mzizmor�[0m�[2m:�[0m 🌈 completed /github/workspace/.github/workflows/__renovate.yml
�[32m INFO�[0m �[1maudit�[0m�[2m:�[0m �[2mzizmor�[0m�[2m:�[0m 🌈 completed /github/workspace/.github/workflows/__semantic-pull-request.yml
�[32m INFO�[0m �[1maudit�[0m�[2m:�[0m �[2mzizmor�[0m�[2m:�[0m 🌈 completed /github/workspace/.github/workflows/__shared-ci.yml
�[32m INFO�[0m �[1maudit�[0m�[2m:�[0m �[2mzizmor�[0m�[2m:�[0m 🌈 completed /github/workspace/.github/workflows/__stale.yml
�[32m INFO�[0m �[1maudit�[0m�[2m:�[0m �[2mzizmor�[0m�[2m:�[0m 🌈 completed /github/workspace/.github/workflows/__test-action-docker-build-image.yml
�[32m INFO�[0m �[1maudit�[0m�[2m:�[0m �[2mzizmor�[0m�[2m:�[0m 🌈 completed /github/workspace/.github/workflows/__test-action-helm-release-chart.yml
�[32m INFO�[0m �[1maudit�[0m�[2m:�[0m �[2mzizmor�[0m�[2m:�[0m 🌈 completed /github/workspace/.github/workflows/__test-action-helm-sign-chart.yml
�[32m INFO�[0m �[1maudit�[0m�[2m:�[0m �[2mzizmor�[0m�[2m:�[0m 🌈 completed /github/workspace/.github/workflows/docker-build-images.yml
�[32m INFO�[0m �[1maudit�[0m�[2m:�[0m �[2mzizmor�[0m�[2m:�[0m 🌈 completed /github/workspace/.github/workflows/prune-pull-requests-images-tags.yml
�[32m INFO�[0m �[1maudit�[0m�[2m:�[0m �[2mzizmor�[0m�[2m:�[0m 🌈 completed /github/workspace/actions/docker/build-image/action.yml
�[32m INFO�[0m �[1maudit�[0m�[2m:�[0m �[2mzizmor�[0m�[2m:�[0m 🌈 completed /github/workspace/actions/helm/generate-docs/action.yml
�[32m INFO�[0m �[1maudit�[0m�[2m:�[0m �[2mzizmor�[0m�[2m:�[0m 🌈 completed /github/workspace/actions/helm/release-chart/action.yml
�[32m INFO�[0m �[1maudit�[0m�[2m:�[0m �[2mzizmor�[0m�[2m:�[0m 🌈 completed /github/workspace/actions/helm/update-chart-values/action.yml

TRIVY

Report Summary

┌─────────────────────────────────────────────────────────────────────────────────┬────────────┬─────────────────┬───────────────────┬─────────┐
│                                     Target                                      │    Type    │ Vulnerabilities │ Misconfigurations │ Secrets │
├─────────────────────────────────────────────────────────────────────────────────┼────────────┼─────────────────┼───────────────────┼─────────┤
│ actions/helm/generate-docs/package-lock.json                                    │    npm     │       11        │         -         │    -    │
├─────────────────────────────────────────────────────────────────────────────────┼────────────┼─────────────────┼───────────────────┼─────────┤
│ actions/helm/release-chart/package-lock.json                                    │    npm     │        0        │         -         │    -    │
├─────────────────────────────────────────────────────────────────────────────────┼────────────┼─────────────────┼───────────────────┼─────────┤
│ tests/charts/package-lock.json                                                  │    npm     │        0        │         -         │    -    │
├─────────────────────────────────────────────────────────────────────────────────┼────────────┼─────────────────┼───────────────────┼─────────┤
│ Dockerfile                                                                      │ dockerfile │        -        │         0         │    -    │
├─────────────────────────────────────────────────────────────────────────────────┼────────────┼─────────────────┼───────────────────┼─────────┤
│ tests/application/Dockerfile                                                    │ dockerfile │        -        │         0         │    -    │
├─────────────────────────────────────────────────────────────────────────────────┼────────────┼─────────────────┼───────────────────┼─────────┤
│ tests/charts/application/templates/configmap.tpl                                │    helm    │        -        │         0         │    -    │
├─────────────────────────────────────────────────────────────────────────────────┼────────────┼─────────────────┼───────────────────┼─────────┤
│ tests/charts/application/templates/deployment.tpl                               │    helm    │        -        │         0         │    -    │
├─────────────────────────────────────────────────────────────────────────────────┼────────────┼─────────────────┼───────────────────┼─────────┤
│ tests/charts/application/templates/networkpolicy.tpl                            │    helm    │        -        │         0         │    -    │
├─────────────────────────────────────────────────────────────────────────────────┼────────────┼─────────────────┼───────────────────┼─────────┤
│ tests/charts/application/templates/service.tpl                                  │    helm    │        -        │         0         │    -    │
├─────────────────────────────────────────────────────────────────────────────────┼────────────┼─────────────────┼───────────────────┼─────────┤
│ tests/charts/application/templates/serviceaccount.tpl                           │    helm    │        -        │         0         │    -    │
├─────────────────────────────────────────────────────────────────────────────────┼────────────┼─────────────────┼───────────────────┼─────────┤
│ tests/charts/umbrella-application/charts/app/templates/configmap.tpl            │    helm    │        -        │         0         │    -    │
├─────────────────────────────────────────────────────────────────────────────────┼────────────┼─────────────────┼───────────────────┼─────────┤
│ tests/charts/umbrella-application/charts/app/templates/deployment.tpl           │    helm    │        -        │         0         │    -    │
├─────────────────────────────────────────────────────────────────────────────────┼────────────┼─────────────────┼───────────────────┼─────────┤
│ tests/charts/umbrella-application/charts/app/templates/networkpolicy.tpl        │    helm    │        -        │         0         │    -    │
├─────────────────────────────────────────────────────────────────────────────────┼────────────┼─────────────────┼───────────────────┼─────────┤
│ tests/charts/umbrella-application/charts/app/templates/service.tpl              │    helm    │        -        │         0         │    -    │
├─────────────────────────────────────────────────────────────────────────────────┼────────────┼─────────────────┼───────────────────┼─────────┤
│ tests/charts/umbrella-application/charts/app/templates/serviceaccount.tpl       │    helm    │        -        │         0         │    -    │
├─────────────────────────────────────────────────────────────────────────────────┼────────────┼─────────────────┼───────────────────┼─────────┤
│ tests/charts/umbrella-application/charts/database/templates/deploy_valkey.yaml  │    helm    │        -        │         0         │    -    │
├─────────────────────────────────────────────────────────────────────────────────┼────────────┼─────────────────┼───────────────────┼─────────┤
│ tests/charts/umbrella-application/charts/database/templates/init_config.yaml    │    helm    │        -        │         0         │    -    │
├─────────────────────────────────────────────────────────────────────────────────┼────────────┼─────────────────┼───────────────────┼─────────┤
│ tests/charts/umbrella-application/charts/database/templates/netpolicy.yaml      │    helm    │        -        │         0         │    -    │
├─────────────────────────────────────────────────────────────────────────────────┼────────────┼─────────────────┼───────────────────┼─────────┤
│ tests/charts/umbrella-application/charts/database/templates/service.yaml        │    helm    │        -        │         0         │    -    │
├─────────────────────────────────────────────────────────────────────────────────┼────────────┼─────────────────┼───────────────────┼─────────┤
│ tests/charts/umbrella-application/charts/database/templates/serviceaccount.yaml │    helm    │        -        │         0         │    -    │
├─────────────────────────────────────────────────────────────────────────────────┼────────────┼─────────────────┼───────────────────┼─────────┤
│ tests/charts/umbrella-application/templates/database-custom-config.tpl          │    helm    │        -        │         0         │    -    │
└─────────────────────────────────────────────────────────────────────────────────┴────────────┴─────────────────┴───────────────────┴─────────┘
Legend:
- '-': Not scanned
- '0': Clean (no security findings detected)


For OSS Maintainers: VEX Notice
--------------------------------
If you're an OSS maintainer and Trivy has detected vulnerabilities in your project that you believe are not actually exploitable, consider issuing a VEX (Vulnerability Exploitability eXchange) statement.
VEX allows you to communicate the actual status of vulnerabilities in your project, improving security transparency and reducing false positives for your users.
Learn more and start using VEX: https://trivy.dev/docs/v0.74/guide/supply-chain/vex/repo#publishing-vex-documents

To disable this notice, set the TRIVY_DISABLE_VEX_NOTICE environment variable.


actions/helm/generate-docs/package-lock.json (npm)
==================================================
Total: 11 (UNKNOWN: 0, LOW: 3, MEDIUM: 3, HIGH: 5, CRITICAL: 0)

┌──────────────────────────────┬─────────────────────┬──────────┬────────┬───────────────────┬─────────────────────┬──────────────────────────────────────────────────────────────┐
│           Library            │    Vulnerability    │ Severity │ Status │ Installed Version │    Fixed Version    │                            Title                             │
├──────────────────────────────┼─────────────────────┼──────────┼────────┼───────────────────┼─────────────────────┼──────────────────────────────────────────────────────────────┤
│ @modelcontextprotocol/server │ CVE-2026-111768     │ HIGH     │ fixed  │ 2.0.0             │ 2.3.0               │ MCP TypeScript SDK: One HTTP request within the default size │
│                              │                     │          │        │                   │                     │ limit could...                                               │
│                              │                     │          │        │                   │                     │ https://avd.aquasec.com/nvd/cve-2026-111768                  │
│                              ├─────────────────────┤          │        │                   │                     ├──────────────────────────────────────────────────────────────┤
│                              │ CVE-2026-111770     │          │        │                   │                     │ MCP TypeScript server SDK: Shared transport or server        │
│                              │                     │          │        │                   │                     │ instances delivered one...                                   │
│                              │                     │          │        │                   │                     │ https://avd.aquasec.com/nvd/cve-2026-111770                  │
│                              ├─────────────────────┤          │        │                   ├─────────────────────┼──────────────────────────────────────────────────────────────┤
│                              │ GHSA-f897-62hf-6gxq │          │        │                   │ 2.1.0               │ MCP TypeScript SDK: HTTP server transports and handlers did  │
│                              │                     │          │        │                   │                     │ not limit request...                                         │
│                              │                     │          │        │                   │                     │ https://github.com/advisories/GHSA-f897-62hf-6gxq            │
│                              ├─────────────────────┼──────────┤        │                   ├─────────────────────┼──────────────────────────────────────────────────────────────┤
│                              │ CVE-2026-111771     │ MEDIUM   │        │                   │ 2.3.0               │ MCP TypeScript SDK: Server bearer authentication accepted    │
│                              │                     │          │        │                   │                     │ tokens issued for another service...                         │
│                              │                     │          │        │                   │                     │ https://avd.aquasec.com/nvd/cve-2026-111771                  │
├──────────────────────────────┼─────────────────────┤          │        ├───────────────────┼─────────────────────┼──────────────────────────────────────────────────────────────┤
│ fast-uri                     │ CVE-2026-110180     │          │        │ 3.1.8             │ 2.4.8, 3.1.9, 4.2.3 │ fast-uri: fast-uri: Security policy bypass via improper host │
│                              │                     │          │        │                   │                     │ canonicalization                                             │
│                              │                     │          │        │                   │                     │ https://avd.aquasec.com/nvd/cve-2026-110180                  │
│                              ├─────────────────────┤          │        │                   │                     ├──────────────────────────────────────────────────────────────┤
│                              │ CVE-2026-110306     │          │        │                   │                     │ fast-uri: fast-uri: Cross-Site Scripting via improper URI    │
│                              │                     │          │        │                   │                     │ scheme decoding                                              │
│                              │                     │          │        │                   │                     │ https://avd.aquasec.com/nvd/cve-2026-110306                  │
│                              ├─────────────────────┼──────────┤        │                   │                     ├──────────────────────────────────────────────────────────────┤
│                              │ CVE-2026-110095     │ LOW      │        │                   │                     │ fast-uri: fast-uri: Path traversal via improper relative URI │
│                              │                     │          │        │                   │                     │ normalization                                                │
│                              │                     │          │        │                   │                     │ https://avd.aquasec.com/nvd/cve-2026-110095                  │
│                              ├─────────────────────┤          │        │                   │                     ├──────────────────────────────────────────────────────────────┤
│                              │ CVE-2026-110725     │          │        │                   │                     │ fast-uri: fast-uri: Cross-site scripting via unescaped colon │
│                              │                     │          │        │                   │                     │ in relative URI paths                                        │
│                              │                     │          │        │                   │                     │ https://avd.aquasec.com/nvd/cve-2026-110725                  │
├──────────────────────────────┼─────────────────────┼──────────┤        ├───────────────────┼─────────────────────┼──────────────────────────────────────────────────────────────┤
│ markdown-it                  │ CVE-2026-111758     │ HIGH     │        │ 15.0.1            │ 14.3.3, 15.0.3      │ markdown-it: markdown-it: Denial of Service via unclosed     │
│                              │                     │          │        │                   │                     │ link reference definitions                                   │
│                              │                     │          │        │                   │                     │ https://avd.aquasec.com/nvd/cve-2026-111758                  │
│                              ├─────────────────────┤          │        │                   ├─────────────────────┼──────────────────────────────────────────────────────────────┤
│                              │ CVE-2026-111759     │          │        │                   │ 15.0.2, 14.3.2      │ markdown-it: markdown-it: Denial of Service via mismatched   │
│                              │                     │          │        │                   │                     │ quote parsing                                                │
│                              │                     │          │        │                   │                     │ https://avd.aquasec.com/nvd/cve-2026-111759                  │
│                              ├─────────────────────┼──────────┤        │                   ├─────────────────────┼──────────────────────────────────────────────────────────────┤
│                              │ CVE-2026-111766     │ LOW      │        │                   │ 14.3.3, 15.0.3      │ markdown-it: markdown-it: Denial of Service via repeated     │
│                              │                     │          │        │                   │                     │ unterminated inline HTML constructs                          │
│                              │                     │          │        │                   │                     │ https://avd.aquasec.com/nvd/cve-2026-111766                  │
└──────────────────────────────┴─────────────────────┴──────────┴────────┴───────────────────┴─────────────────────┴──────────────────────────────────────────────────────────────┘