Compare commits

...

2 Commits

Author SHA1 Message Date
Bruno Borges a23239ee9c Harden set-default Checkout in e2e-versions.yml (persist-credentials: false)
The Checkout step in the set-default option job was the only one of 17
checkout steps in the workflow missing persist-credentials: false,
flagged by zizmor's artipacked audit. Align it with the rest of the file.

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
2026-07-14 16:09:30 -04:00
Copilot cd57b95697 Fix template injection in e2e-versions.yml (zizmor alert #122) (#1120)
* Initial plan

* Fix template injection in e2e-versions.yml (zizmor alert #122)

---------

Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>
2026-07-14 15:55:49 -04:00
+9 -4
View File
@@ -704,6 +704,8 @@ jobs:
steps:
- name: Checkout
uses: actions/checkout@v7
with:
persist-credentials: false
- name: Setup Java 17 as default
uses: ./
id: setup-java-17
@@ -756,14 +758,17 @@ jobs:
Write-Host "$envName=$JavaVersionPath"
shell: pwsh
- name: Verify Java 21 outputs are set
env:
JAVA_21_PATH: ${{ steps.setup-java-21.outputs.path }}
JAVA_21_VERSION: ${{ steps.setup-java-21.outputs.version }}
run: |
echo "Java 21 path=${{ steps.setup-java-21.outputs.path }}"
echo "Java 21 version=${{ steps.setup-java-21.outputs.version }}"
if [ -z "${{ steps.setup-java-21.outputs.path }}" ]; then
echo "Java 21 path=$JAVA_21_PATH"
echo "Java 21 version=$JAVA_21_VERSION"
if [ -z "$JAVA_21_PATH" ]; then
echo "Java 21 path output should be set"
exit 1
fi
if [ -z "${{ steps.setup-java-21.outputs.version }}" ]; then
if [ -z "$JAVA_21_VERSION" ]; then
echo "Java 21 version output should be set"
exit 1
fi