ci: remediate zizmor findings - #8592

Open

opentelemetrybot wants to merge 18 commits into

open-telemetry:mainfrom

opentelemetrybot:zizmor-rollout/pilot-20260711

Commits on Jul 22, 2026

Add shared zizmor workflow
opentelemetrybot
committed
6e066da
Fix blocking zizmor findings
opentelemetrybot
committed
52f5ccc
Add shared zizmor workflow
opentelemetrybot
committed
20f35fc
Add trailing newline
opentelemetrybot
committed
0461d8c
Clarify CodeQL release branch comment
opentelemetrybot
committed
f8c07e4
Document zizmor schedule
opentelemetrybot
committed
5772ca8
Run zizmor on all pull requests
opentelemetrybot
committed
b972001
Scan release branch pushes with zizmor
opentelemetrybot
committed
4e2d478
Update shared zizmor workflow to v0.4.0
opentelemetrybot
committed
cd85f49
ci: remediate zizmor findings
opentelemetrybot
committed
34e3208
ci: preserve authenticated workflow pushes
opentelemetrybot
committed
d3bff53
ci: authenticate release pull request push
opentelemetrybot
committed
c3326f0
ci: preserve workflow push credentials
opentelemetrybot
committed
73917f1
ci: use checkout credentials for git pushes
opentelemetrybot
committed
aa82a73
ci: retain credentials on pushed checkout
opentelemetrybot
committed
4d35a3b
ci: clarify zizmor suppression rationales
opentelemetrybot
committed
b1c1585
ci: colocate zizmor suppression rationales
opentelemetrybot
committed
d6729de

Commits on Jul 31, 2026

Merge upstream/main into zizmor rollout branch
opentelemetrybot
committed
72e9836