==> Updating pacman database cache :: Synchronizing package databases... core downloading... extra downloading... ==> Building zizmor -> repo: extra-staging -> arch: aarch64 -> worker: ben-1 ==> Building zizmor for [extra-staging] (aarch64) Note: in a future version of systemd-nspawn the default set of permitted socket address families will be restricted to AF_INET, AF_INET6 and AF_UNIX. Use --restrict-address-families= to configure the set of permitted socket address families, or set RestrictAddressFamilies= in a .nspawn file. :: Synchronizing package databases... core-staging downloading... core-testing downloading... core downloading... extra-staging downloading... extra-testing downloading... aur downloading... extra downloading... :: Starting full system upgrade... there is nothing to do ==> Building in chroot for [extra-staging] (aarch64)... ==> Synchronizing chroot copy [/var/lib/archbuild/extra-staging-aarch64/root] -> [ben-1]...done ==> Making package: zizmor 1.28.0-1 (Sat Jul 25 13:41:25 2026) ==> Retrieving sources... -> Downloading zizmor-1.28.0.tar.gz... % Total % Received % Xferd Average Speed Time Time Time Current Dload Upload Total Spent Left Speed 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 100 693.1k 0 693.1k 0 0 1.19M 0 0 100 693.1k 0 693.1k 0 0 1.19M 0 0 100 693.1k 0 693.1k 0 0 1.19M 0 0 ==> Validating source files with sha256sums... zizmor-1.28.0.tar.gz ... Passed ==> Validating source files with b2sums... zizmor-1.28.0.tar.gz ... Passed Note: in a future version of systemd-nspawn the default set of permitted socket address families will be restricted to AF_INET, AF_INET6 and AF_UNIX. Use --restrict-address-families= to configure the set of permitted socket address families, or set RestrictAddressFamilies= in a .nspawn file. ==> Making package: zizmor 1.28.0-1 (Sat Jul 25 20:41:33 2026) ==> Checking runtime dependencies... ==> Checking buildtime dependencies... ==> Installing missing dependencies... :: There are 4 providers available for cargo: :: Repository extra-testing 1) rust 2) rustup :: Repository extra 3) rust 4) rustup Enter a number (default=1): resolving dependencies... looking for conflicting packages... Package (7) New Version Net Change extra-testing/compiler-rt 22.1.8-1 34.52 MiB core/libedit 20260512_3.1-1 0.30 MiB extra-testing/libgit2 1:1.9.6-1 3.16 MiB extra-testing/lld 22.1.8-1 7.18 MiB extra-testing/llhttp 9.3.1-1 0.16 MiB extra-testing/llvm-libs 22.1.8-2 159.60 MiB extra-testing/rust 1:1.97.1-1 293.57 MiB Total Installed Size: 498.49 MiB :: Proceed with installation? [Y/n] :: Retrieving packages... rust-1:1.97.1-1-aarch64 downloading... llvm-libs-22.1.8-2-aarch64 downloading... compiler-rt-22.1.8-1-aarch64 downloading... lld-22.1.8-1-aarch64 downloading... libgit2-1:1.9.6-1-aarch64 downloading... libedit-20260512_3.1-1-aarch64 downloading... llhttp-9.3.1-1-aarch64 downloading... checking keyring... checking package integrity... loading package files... checking for file conflicts... :: Processing package changes... installing compiler-rt... installing llhttp... installing libgit2... installing libedit... installing llvm-libs... installing lld... installing rust... Optional dependencies for rust gdb: rust-gdb script [installed] lldb: rust-lldb script :: Running post-transaction hooks... (1/1) Arming ConditionNeedsUpdate... ==> Retrieving sources... -> Found zizmor-1.28.0.tar.gz ==> WARNING: Skipping all source file integrity checks. ==> Extracting sources... -> Extracting zizmor-1.28.0.tar.gz with bsdtar ==> Starting prepare()... Updating crates.io index Downloading crates ... Downloaded xattr v1.6.1 Downloaded tar v0.4.46 Downloaded yoke-derive v0.8.0 Downloaded stable_deref_trait v1.2.1 Downloaded filetime v0.2.26 Downloaded schemars_derive v1.2.1 Downloaded predicates-core v1.0.9 Downloaded potential_utf v0.1.3 Downloaded displaydoc v0.2.5 Downloaded writeable v0.6.1 Downloaded serde_json v1.0.150 Downloaded icu_provider v2.0.0 Downloaded zerotrie v0.2.2 Downloaded icu_normalizer_data v2.0.0 Downloaded quinn v0.11.9 Downloaded termtree v0.5.1 Downloaded url v2.5.7 Downloaded tikv-jemalloc-sys v0.7.1+5.3.1-0-g81034ce1f1373e37dc865038e1bc8eeecf559ce8 Downloaded yoke v0.8.0 Downloaded form_urlencoded v1.2.2 Downloaded clap_lex v1.0.0 Downloaded wait-timeout v0.2.1 Downloaded heck v0.5.0 Downloaded strsim v0.11.1 Downloaded version_check v0.9.5 Downloaded predicates-tree v1.0.12 Downloaded idna_adapter v1.2.1 Downloaded reqwest-middleware v0.5.2 Downloaded equivalent v1.0.2 Downloaded serde_derive_internals v0.29.1 Downloaded zerovec v0.11.4 Downloaded tokio-rustls v0.26.4 Downloaded clap-verbosity-flag v3.0.4 Downloaded difflib v0.4.0 Downloaded clap_derive v4.6.1 Downloaded assert_cmd v2.2.2 Downloaded predicates v3.1.3 Downloaded schemars v1.2.1 Downloaded http-body v1.0.1 Downloaded pin-utils v0.1.0 Downloaded camino v1.2.4 Downloaded fnv v1.0.7 Downloaded zmij v1.0.2 Downloaded zerofrom-derive v0.1.6 Downloaded serde_urlencoded v0.7.1 Downloaded annotate-snippets v0.12.16 Downloaded once_cell v1.21.3 Downloaded serde_core v1.0.228 Downloaded nohash-hasher v0.2.0 Downloaded dunce v1.0.5 Downloaded rand_core v0.9.3 Downloaded memchr v2.8.3 Downloaded itoa v1.0.15 Downloaded indexmap v2.14.0 Downloaded tree-sitter-language v0.1.5 Downloaded jobserver v0.1.34 Downloaded thiserror-impl v2.0.18 Downloaded text-size v1.1.1 Downloaded getrandom v0.3.4 Downloaded cfg-if v1.0.4 Downloaded unit-prefix v0.5.1 Downloaded tokio-macros v2.7.0 Downloaded synstructure v0.13.2 Downloaded rustls-pki-types v1.12.0 Downloaded allocator-api2 v0.2.21 Downloaded find-msvc-tools v0.1.5 Downloaded icu_normalizer v2.0.0 Downloaded tower-http v0.6.8 Downloaded zeroize v1.8.2 Downloaded hyper-rustls v0.27.7 Downloaded uuid-simd v0.8.0 Downloaded shlex v1.3.0 Downloaded either v1.16.0 Downloaded sharded-slab v0.1.7 Downloaded bitflip v0.1.0 Downloaded tower-layer v0.3.3 Downloaded untrusted v0.9.0 Downloaded dyn-clone v1.0.20 Downloaded subtle v2.6.1 Downloaded openssl-probe v0.1.6 Downloaded rustc-hash v2.1.1 Downloaded cfg_aliases v0.2.1 Downloaded mime v0.3.17 Downloaded foldhash v0.2.0 Downloaded console v0.16.4 Downloaded utf8_iter v1.0.4 Downloaded zerofrom v0.1.6 Downloaded lru-slab v0.1.2 Downloaded atomic-waker v1.1.2 Downloaded powerfmt v0.2.0 Downloaded cc v1.2.49 Downloaded zerovec-derive v0.11.1 Downloaded tinystr v0.8.1 Downloaded want v0.3.1 Downloaded h2 v0.4.13 Downloaded self_cell v1.2.2 Downloaded pin-project-lite v0.2.16 Downloaded lazy_static v1.5.0 Downloaded arrayvec v0.7.6 Downloaded tower-service v0.3.3 Downloaded sha1 v0.10.6 Downloaded fastrand v2.3.0 Downloaded matchers v0.2.0 Downloaded scopeguard v1.2.0 Downloaded fs_extra v1.3.0 Downloaded cmake v0.1.54 Downloaded rustls-native-certs v0.8.1 Downloaded tinyvec_macros v0.1.1 Downloaded try-lock v0.2.5 Downloaded http-body-util v0.1.3 Downloaded vsimd v0.8.0 Downloaded outref v0.5.2 Downloaded colorchoice v1.0.4 Downloaded embedded-io v0.4.0 Downloaded block-buffer v0.10.4 Downloaded miette-derive v5.10.0 Downloaded clap_builder v4.6.0 Downloaded hashbrown v0.17.0 Downloaded libyaml-rs v0.3.0 Downloaded streaming-iterator v0.1.9 Downloaded thiserror v2.0.18 Downloaded line-index v0.1.2 Downloaded errno v0.3.14 Downloaded tracing-core v0.1.36 Downloaded tracing-indicatif v0.3.14 Downloaded vt100 v0.16.2 Downloaded http v1.4.2 Downloaded ppv-lite86 v0.2.21 Downloaded ipnet v2.11.0 Downloaded async-trait v0.1.89 Downloaded owo-colors v4.3.0 Downloaded unicode-general-category v1.1.0 Downloaded parking_lot v0.12.5 Downloaded is_terminal_polyfill v1.70.2 Downloaded hex v0.4.3 Downloaded thiserror-impl v1.0.69 Downloaded sha2 v0.10.9 Downloaded cpufeatures v0.2.17 Downloaded quote v1.0.45 Downloaded tracing-attributes v0.1.31 Downloaded tracing-log v0.2.0 Downloaded thread_local v1.1.9 Downloaded nu-ansi-term v0.50.3 Downloaded vte v0.15.0 Downloaded socket2 v0.6.3 Downloaded mio v1.2.0 Downloaded sync_wrapper v1.0.2 Downloaded slab v0.4.11 Downloaded futures-io v0.3.32 Downloaded ref-cast-impl v1.0.25 Downloaded dashmap v6.1.0 Downloaded litemap v0.8.0 Downloaded rand_chacha v0.9.0 Downloaded anyhow v1.0.103 Downloaded referencing v0.47.0 Downloaded ahash v0.8.12 Downloaded autocfg v1.5.0 Downloaded num v0.4.3 Downloaded bit-set v0.8.0 Downloaded data-encoding v2.9.0 Downloaded bytecount v0.6.9 Downloaded crossbeam-deque v0.8.6 Downloaded rustc-demangle v0.1.26 Downloaded parking v2.2.1 Downloaded serde_derive v1.0.228 Downloaded unicode-ident v1.0.20 Downloaded proc-macro2 v1.0.106 Downloaded ryu v1.0.20 Downloaded typomania v0.2.0 Downloaded smallvec v1.15.1 Downloaded parking_lot_core v0.9.12 Downloaded lock_api v0.4.14 Downloaded getrandom v0.2.16 Downloaded quinn-udp v0.5.14 Downloaded tinyvec v1.10.0 Downloaded num-complex v0.4.6 Downloaded email_address v0.2.9 Downloaded same-file v1.0.6 Downloaded toml_writer v1.1.1+spec-1.1.0 Downloaded toml_datetime v1.1.1+spec-1.1.0 Downloaded http-serde v2.1.1 Downloaded tagptr v0.2.0 Downloaded cacache v13.1.0 Downloaded yaml_serde v0.10.4 Downloaded insta v1.48.0 Downloaded tempfile v3.23.0 Downloaded bitflags v2.10.0 Downloaded similar v2.7.0 Downloaded log v0.4.28 Downloaded indicatif v0.18.6 Downloaded tower-lsp-server v0.23.0 Downloaded futures-task v0.3.32 Downloaded futures-channel v0.3.32 Downloaded fluent-uri v0.3.2 Downloaded icu_properties v2.0.1 Downloaded icu_locale_core v2.0.0 Downloaded rustls-webpki v0.103.13 Downloaded rustls-platform-verifier v0.6.1 Downloaded base64 v0.22.1 Downloaded micromap v0.3.0 Downloaded fluent-uri v0.4.1 Downloaded jsonschema-regex v0.47.0 Downloaded bit-vec v0.8.0 Downloaded crossbeam-epoch v0.9.18 Downloaded miniz_oxide v0.8.9 Downloaded utf8parse v0.2.2 Downloaded postcard v1.1.3 Downloaded embedded-io v0.6.1 Downloaded event-listener v5.4.1 Downloaded concurrent-queue v2.5.0 Downloaded reflink-copy v0.1.28 Downloaded serde v1.0.228 Downloaded regex v1.13.0 Downloaded icu_collections v2.0.0 Downloaded getrandom v0.4.2 Downloaded time-core v0.1.8 Downloaded deranged v0.5.4 Downloaded miette v5.10.0 Downloaded base64 v0.21.7 Downloaded memmap2 v0.5.10 Downloaded tree-sitter-yaml v0.7.2 Downloaded tower v0.5.2 Downloaded iri-string v0.7.8 Downloaded rand v0.9.4 Downloaded hyper-util v0.1.17 Downloaded http-cache v1.0.0-alpha.6 Downloaded cobs v0.3.0 Downloaded async-lock v3.4.1 Downloaded clap v4.6.1 Downloaded aho-corasick v1.1.3 Downloaded human-panic v2.0.8 Downloaded toml v1.1.1+spec-1.1.0 Downloaded addr2line v0.25.1 Downloaded anstyle-query v1.1.4 Downloaded crossbeam-channel v0.5.15 Downloaded tree-sitter v0.26.11 Downloaded itertools v0.14.0 Downloaded portable-atomic v1.13.1 Downloaded idna v1.1.0 Downloaded walkdir v2.5.0 Downloaded num-conv v0.2.0 Downloaded etcetera v0.11.0 Downloaded tree-sitter-powershell v0.26.4 Downloaded tracing-subscriber v0.3.23 Downloaded reqwest v0.13.4 Downloaded hyper v1.7.0 Downloaded anstyle-parse v1.0.0 Downloaded clap_complete v4.6.7 Downloaded unicode-width v0.2.2 Downloaded borrow-or-share v0.2.4 Downloaded hashbrown v0.14.5 Downloaded icu_properties_data v2.0.1 Downloaded num-rational v0.4.2 Downloaded globset v0.4.18 Downloaded http-cache-reqwest v1.0.0-alpha.6 Downloaded moka v0.12.11 Downloaded httpdate v1.0.3 Downloaded unicode-width v0.1.14 Downloaded syn v2.0.117 Downloaded ref-cast v1.0.25 Downloaded futures v0.3.32 Downloaded futures-executor v0.3.32 Downloaded fraction v0.15.3 Downloaded simd-adler32 v0.3.7 Downloaded adler2 v2.0.1 Downloaded anstyle v1.0.13 Downloaded regex-syntax v0.8.11 Downloaded tree-sitter-bash v0.25.1 Downloaded httparse v1.10.1 Downloaded aws-lc-rs v1.17.0 Downloaded object v0.37.3 Downloaded event-listener-strategy v0.5.4 Downloaded ssri v9.2.0 Downloaded xxhash-rust v0.8.15 Downloaded digest v0.10.7 Downloaded futures-util v0.3.32 Downloaded futures-sink v0.3.32 Downloaded futures-macro v0.3.32 Downloaded tikv-jemallocator v0.7.0 Downloaded quinn-proto v0.11.14 Downloaded zerocopy v0.8.27 Downloaded num-traits v0.2.19 Downloaded num-integer v0.1.46 Downloaded uuid v1.23.0 Downloaded anstream v1.0.0 Downloaded time v0.3.47 Downloaded flate2 v1.1.9 Downloaded jsonschema v0.47.0 Downloaded num-bigint v0.4.6 Downloaded fancy-regex v0.18.0 Downloaded rustix v1.1.2 Downloaded tracing v0.1.44 Downloaded bytes v1.11.1 Downloaded rustls v0.23.34 Downloaded num-iter v0.1.45 Downloaded serde_spanned v1.1.1 Downloaded backtrace v0.3.76 Downloaded crypto-common v0.1.6 Downloaded num-cmp v0.1.0 Downloaded bstr v1.12.0 Downloaded gimli v0.32.3 Downloaded futures-core v0.3.32 Downloaded tokio-util v0.7.16 Downloaded percent-encoding v2.3.2 Downloaded sha-1 v0.10.1 Downloaded clap_complete_nushell v4.6.0 Downloaded crossbeam-utils v0.8.21 Downloaded thiserror v1.0.69 Downloaded generic-array v0.14.9 Downloaded csv-core v0.1.13 Downloaded tokio-stream v0.1.17 Downloaded typenum v1.19.0 Downloaded crc32fast v1.5.0 Downloaded ls-types v0.0.2 Downloaded time-macros v0.2.27 Downloaded itertools v0.15.0 Downloaded ignore v0.4.28 Downloaded regex-automata v0.4.14 Downloaded sysinfo v0.38.4 Downloaded http-cache-semantics v3.0.0 Downloaded libc v0.2.185 Downloaded csv v1.4.0 Downloaded tokio v1.52.3 Downloaded encoding_rs v0.8.35 Downloaded ring v0.17.14 Downloaded linux-raw-sys v0.11.0 Downloaded fst v0.4.7 Downloaded aws-lc-sys v0.41.0 Downloaded terminal-link v0.1.0 ==> Starting build()... Compiling proc-macro2 v1.0.106 Compiling quote v1.0.45 Compiling unicode-ident v1.0.20 Compiling libc v0.2.185 Compiling memchr v2.8.3 Compiling serde_core v1.0.228 Compiling shlex v1.3.0 Compiling find-msvc-tools v0.1.5 Compiling cfg-if v1.0.4 Compiling itoa v1.0.15 Compiling pin-project-lite v0.2.16 Compiling serde v1.0.228 Compiling once_cell v1.21.3 Compiling zmij v1.0.2 Compiling futures-core v0.3.32 Compiling bytes v1.11.1 Compiling smallvec v1.15.1 Compiling version_check v0.9.5 Compiling futures-sink v0.3.32 Compiling stable_deref_trait v1.2.1 Compiling regex-syntax v0.8.11 Compiling equivalent v1.0.2 Compiling slab v0.4.11 Compiling syn v2.0.117 Compiling futures-channel v0.3.32 Compiling aho-corasick v1.1.3 Compiling tracing-core v0.1.36 Compiling jobserver v0.1.34 Compiling mio v1.2.0 Compiling socket2 v0.6.3 Compiling cc v1.2.49 Compiling crossbeam-utils v0.8.21 Compiling futures-task v0.3.32 Compiling dunce v1.0.5 Compiling foldhash v0.2.0 Compiling fs_extra v1.3.0 Compiling allocator-api2 v0.2.21 Compiling futures-io v0.3.32 Compiling serde_json v1.0.150 Compiling hashbrown v0.17.0 Compiling cmake v0.1.54 Compiling regex-automata v0.4.14 Compiling http v1.4.2 Compiling typenum v1.19.0 Compiling bitflags v2.10.0 Compiling percent-encoding v2.3.2 Compiling aws-lc-sys v0.41.0 Compiling generic-array v0.14.9 Compiling litemap v0.8.0 Compiling writeable v0.6.1 Compiling aws-lc-rs v1.17.0 Compiling synstructure v0.13.2 Compiling icu_properties_data v2.0.1 Compiling icu_normalizer_data v2.0.0 Compiling thiserror v2.0.18 Compiling zeroize v1.8.2 Compiling autocfg v1.5.0 Compiling indexmap v2.14.0 Compiling num-traits v0.2.19 Compiling log v0.4.28 Compiling parking_lot_core v0.9.12 Compiling rustls-pki-types v1.12.0 Compiling http-body v1.0.1 Compiling getrandom v0.3.4 Compiling httparse v1.10.1 Compiling scopeguard v1.2.0 Compiling rustix v1.1.2 Compiling lock_api v0.4.14 Compiling serde_derive v1.0.228 Compiling zerofrom-derive v0.1.6 Compiling yoke-derive v0.8.0 Compiling tokio-macros v2.7.0 Compiling zerovec-derive v0.11.1 Compiling displaydoc v0.2.5 Compiling tokio v1.52.3 Compiling futures-macro v0.3.32 Compiling tracing-attributes v0.1.31 Compiling thiserror-impl v2.0.18 Compiling zerofrom v0.1.6 Compiling yoke v0.8.0 Compiling zerovec v0.11.4 Compiling futures-util v0.3.32 Compiling tracing v0.1.44 Compiling zerotrie v0.2.2 Compiling tinystr v0.8.1 Compiling potential_utf v0.1.3 Compiling icu_locale_core v2.0.0 Compiling icu_collections v2.0.0 Compiling icu_provider v2.0.0 Compiling block-buffer v0.10.4 Compiling crypto-common v0.1.6 Compiling icu_properties v2.0.1 Compiling icu_normalizer v2.0.0 Compiling rustls v0.23.34 Compiling utf8parse v0.2.2 Compiling ref-cast v1.0.25 Compiling linux-raw-sys v0.11.0 Compiling untrusted v0.9.0 Compiling anstyle v1.0.13 Compiling tower-service v0.3.3 Compiling anstyle-parse v1.0.0 Compiling idna_adapter v1.2.1 Compiling digest v0.10.7 Compiling ref-cast-impl v1.0.25 Compiling tokio-util v0.7.16 Compiling regex v1.13.0 Compiling cpufeatures v0.2.17 Compiling anstyle-query v1.1.4 Compiling ryu v1.0.20 Compiling tree-sitter-language v0.1.5 Compiling utf8_iter v1.0.4 Compiling is_terminal_polyfill v1.70.2 Compiling atomic-waker v1.1.2 Compiling portable-atomic v1.13.1 Compiling getrandom v0.4.2 Compiling try-lock v0.2.5 Compiling subtle v2.6.1 Compiling thiserror v1.0.69 Compiling fnv v1.0.7 Compiling colorchoice v1.0.4 Compiling h2 v0.4.13 Compiling anstream v1.0.0 Compiling want v0.3.1 Compiling tree-sitter v0.26.11 Compiling idna v1.1.0 Compiling num-integer v0.1.46 Compiling thiserror-impl v1.0.69 Compiling form_urlencoded v1.2.2 Compiling concurrent-queue v2.5.0 Compiling sync_wrapper v1.0.2 Compiling fst v0.4.7 Compiling either v1.16.0 Compiling pin-utils v0.1.0 Compiling parking v2.2.1 Compiling tower-layer v0.3.3 Compiling borrow-or-share v0.2.4 Compiling event-listener v5.4.1 Compiling tower v0.5.2 Compiling futures-executor v0.3.32 Compiling parking_lot v0.12.5 Compiling miette-derive v5.10.0 Compiling crossbeam-epoch v0.9.18 Compiling unicode-width v0.1.14 Compiling base64 v0.22.1 Compiling heck v0.5.0 Compiling ipnet v2.11.0 Compiling same-file v1.0.6 Compiling strsim v0.11.1 Compiling unicode-width v0.2.2 Compiling hyper v1.7.0 Compiling openssl-probe v0.1.6 Compiling lazy_static v1.5.0 Compiling clap_lex v1.0.0 Compiling zerocopy v0.8.27 Compiling powerfmt v0.2.0 Compiling clap_builder v4.6.0 Compiling deranged v0.5.4 Compiling rustls-native-certs v0.8.1 Compiling hyper-util v0.1.17 Compiling miette v5.10.0 Compiling walkdir v2.5.0 Compiling clap_derive v4.6.1 Compiling futures v0.3.32 Compiling uuid v1.23.0 Compiling event-listener-strategy v0.5.4 Compiling url v2.5.7 Compiling num-bigint v0.4.6 Compiling sha2 v0.10.9 Compiling sha-1 v0.10.1 Compiling tree-sitter-yaml v0.7.2 Compiling ahash v0.8.12 Compiling moka v0.12.11 Compiling xxhash-rust v0.8.15 Compiling hex v0.4.3 Compiling base64 v0.21.7 Compiling fastrand v2.3.0 Compiling simd-adler32 v0.3.7 Compiling streaming-iterator v0.1.9 Compiling adler2 v2.0.1 Compiling time-core v0.1.8 Compiling object v0.37.3 Compiling num-conv v0.2.0 Compiling arrayvec v0.7.6 Compiling anyhow v1.0.103 Compiling iri-string v0.7.8 Compiling vte v0.15.0 Compiling time v0.3.47 Compiling miniz_oxide v0.8.9 Compiling tempfile v3.23.0 Compiling ssri v9.2.0 Compiling num-rational v0.4.2 Compiling clap v4.6.1 Compiling tower-http v0.6.8 Compiling async-lock v3.4.1 Compiling serde_urlencoded v0.7.1 Compiling num-iter v0.1.45 Compiling reflink-copy v0.1.28 Compiling sha1 v0.10.6 Compiling tokio-stream v0.1.17 Compiling http-serde v2.1.1 Compiling cobs v0.3.0 Compiling num-complex v0.4.6 Compiling http-body-util v0.1.3 Compiling csv-core v0.1.13 Compiling tikv-jemalloc-sys v0.7.1+5.3.1-0-g81034ce1f1373e37dc865038e1bc8eeecf559ce8 Compiling crossbeam-channel v0.5.15 Compiling memmap2 v0.5.10 Compiling encoding_rs v0.8.35 Compiling bit-vec v0.8.0 Compiling unicode-general-category v1.1.0 Compiling crc32fast v1.5.0 Compiling gimli v0.32.3 Compiling tagptr v0.2.0 Compiling mime v0.3.17 Compiling text-size v1.1.1 Compiling self_cell v1.2.2 Compiling libyaml-rs v0.3.0 Compiling nohash-hasher v0.2.0 Compiling line-index v0.1.2 Compiling csv v1.4.0 Compiling bit-set v0.8.0 Compiling num v0.4.3 Compiling yaml_serde v0.10.4 Compiling cacache v13.1.0 Compiling http-cache-semantics v3.0.0 Compiling postcard v1.1.3 Compiling addr2line v0.25.1 Compiling tree-sitter-iter v1.28.0 (/build/zizmor/src/zizmor-1.28.0/crates/tree-sitter-iter) Compiling vt100 v0.16.2 Compiling sharded-slab v0.1.7 Compiling console v0.16.4 Compiling fluent-uri v0.4.1 Compiling fluent-uri v0.3.2 Compiling subfeature v1.28.0 (/build/zizmor/src/zizmor-1.28.0/crates/subfeature) Compiling async-trait v0.1.89 Compiling matchers v0.2.0 Compiling tracing-log v0.2.0 Compiling tree-sitter-bash v0.25.1 Compiling tree-sitter-powershell v0.26.4 Compiling toml_datetime v1.1.1+spec-1.1.0 Compiling serde_spanned v1.1.1 Compiling bstr v1.12.0 Compiling thread_local v1.1.9 Compiling toml_writer v1.1.1+spec-1.1.0 Compiling outref v0.5.2 Compiling unit-prefix v0.5.1 Compiling hashbrown v0.14.5 Compiling nu-ansi-term v0.50.3 Compiling camino v1.2.4 Compiling rustc-demangle v0.1.26 Compiling vsimd v0.8.0 Compiling micromap v0.3.0 Compiling httpdate v1.0.3 Compiling owo-colors v4.3.0 Compiling uuid-simd v0.8.0 Compiling dashmap v6.1.0 Compiling referencing v0.47.0 Compiling http-cache v1.0.0-alpha.6 Compiling tracing-subscriber v0.3.23 Compiling globset v0.4.18 Compiling backtrace v0.3.76 Compiling toml v1.1.1+spec-1.1.0 Compiling indicatif v0.18.6 Compiling ls-types v0.0.2 Compiling zizmor v1.28.0 (/build/zizmor/src/zizmor-1.28.0/crates/zizmor) Compiling yamlpath v1.28.0 (/build/zizmor/src/zizmor-1.28.0/crates/yamlpath) Compiling fraction v0.15.3 Compiling fancy-regex v0.18.0 Compiling clap_complete v4.6.7 Compiling crossbeam-deque v0.8.6 Compiling itertools v0.14.0 Compiling xattr v1.6.1 Compiling email_address v0.2.9 Compiling jsonschema-regex v0.47.0 Compiling filetime v0.2.26 Compiling sysinfo v0.38.4 Compiling bitflip v0.1.0 Compiling bytecount v0.6.9 Compiling num-cmp v0.1.0 Compiling data-encoding v2.9.0 Compiling human-panic v2.0.8 Compiling jsonschema v0.47.0 Compiling typomania v0.2.0 Compiling tar v0.4.46 Compiling clap_complete_nushell v4.6.0 Compiling ignore v0.4.28 Compiling flate2 v1.1.9 Compiling yamlpatch v1.28.0 (/build/zizmor/src/zizmor-1.28.0/crates/yamlpatch) Compiling tracing-indicatif v0.3.14 Compiling github-actions-expressions v1.28.0 (/build/zizmor/src/zizmor-1.28.0/crates/github-actions-expressions) Compiling github-actions-models v1.28.0 (/build/zizmor/src/zizmor-1.28.0/crates/github-actions-models) Compiling clap-verbosity-flag v3.0.4 Compiling annotate-snippets v0.12.16 Compiling itertools v0.15.0 Compiling tower-lsp-server v0.23.0 Compiling zizmor-sarif v1.28.0 (/build/zizmor/src/zizmor-1.28.0/crates/zizmor-sarif) Compiling etcetera v0.11.0 Compiling terminal-link v0.1.0 Compiling tikv-jemallocator v0.7.0 Compiling rustls-webpki v0.103.13 Compiling tokio-rustls v0.26.4 Compiling hyper-rustls v0.27.7 Compiling rustls-platform-verifier v0.6.1 Compiling reqwest v0.13.4 Compiling reqwest-middleware v0.5.2 Compiling http-cache-reqwest v1.0.0-alpha.6 Finished `release` profile [optimized] target(s) in 7m 27s ==> Starting check()... Compiling proc-macro2 v1.0.106 Compiling quote v1.0.45 Compiling unicode-ident v1.0.20 Compiling libc v0.2.185 Compiling memchr v2.8.3 Compiling itoa v1.0.15 Compiling serde_core v1.0.228 Compiling serde v1.0.228 Compiling cfg-if v1.0.4 Compiling shlex v1.3.0 Compiling find-msvc-tools v0.1.5 Compiling once_cell v1.21.3 Compiling equivalent v1.0.2 Compiling zmij v1.0.2 Compiling pin-project-lite v0.2.16 Compiling regex-syntax v0.8.11 Compiling allocator-api2 v0.2.21 Compiling bitflags v2.10.0 Compiling aho-corasick v1.1.3 Compiling foldhash v0.2.0 Compiling serde_json v1.0.150 Compiling ryu v1.0.20 Compiling hashbrown v0.17.0 Compiling getrandom v0.3.4 Compiling bytes v1.11.1 Compiling syn v2.0.117 Compiling futures-core v0.3.32 Compiling jobserver v0.1.34 Compiling rustix v1.1.2 Compiling tracing-core v0.1.36 Compiling cc v1.2.49 Compiling thiserror v2.0.18 Compiling linux-raw-sys v0.11.0 Compiling regex-automata v0.4.14 Compiling smallvec v1.15.1 Compiling indexmap v2.14.0 Compiling stable_deref_trait v1.2.1 Compiling futures-sink v0.3.32 Compiling version_check v0.9.5 Compiling unicode-width v0.2.2 Compiling mio v1.2.0 Compiling socket2 v0.6.3 Compiling fastrand v2.3.0 Compiling synstructure v0.13.2 Compiling slab v0.4.11 Compiling regex v1.13.0 Compiling tempfile v3.23.0 Compiling futures-channel v0.3.32 Compiling tree-sitter-language v0.1.5 Compiling crossbeam-utils v0.8.21 Compiling console v0.16.4 Compiling cmake v0.1.54 Compiling futures-task v0.3.32 Compiling fs_extra v1.3.0 Compiling futures-io v0.3.32 Compiling libyaml-rs v0.3.0 Compiling dunce v1.0.5 Compiling self_cell v1.2.2 Compiling http v1.4.2 Compiling aws-lc-sys v0.41.0 Compiling percent-encoding v2.3.2 Compiling typenum v1.19.0 Compiling generic-array v0.14.9 Compiling tree-sitter-yaml v0.7.2 Compiling streaming-iterator v0.1.9 Compiling writeable v0.6.1 Compiling litemap v0.8.0 Compiling similar v2.7.0 Compiling zeroize v1.8.2 Compiling aws-lc-rs v1.17.0 Compiling tree-sitter v0.26.11 Compiling serde_derive v1.0.228 Compiling thiserror-impl v2.0.18 Compiling zerofrom-derive v0.1.6 Compiling tracing-attributes v0.1.31 Compiling yoke-derive v0.8.0 Compiling zerovec-derive v0.11.1 Compiling tokio-macros v2.7.0 Compiling zerofrom v0.1.6 Compiling tracing v0.1.44 Compiling displaydoc v0.2.5 Compiling futures-macro v0.3.32 Compiling tokio v1.52.3 Compiling yoke v0.8.0 Compiling zerotrie v0.2.2 Compiling futures-util v0.3.32 Compiling zerovec v0.11.4 Compiling autocfg v1.5.0 Compiling icu_properties_data v2.0.1 Compiling icu_normalizer_data v2.0.0 Compiling insta v1.48.0 Compiling num-traits v0.2.19 Compiling tinystr v0.8.1 Compiling icu_locale_core v2.0.0 Compiling potential_utf v0.1.3 Compiling icu_collections v2.0.0 Compiling yaml_serde v0.10.4 Compiling icu_provider v2.0.0 Compiling log v0.4.28 Compiling anstyle v1.0.13 Compiling parking_lot_core v0.9.12 Compiling subfeature v1.28.0 (/build/zizmor/src/zizmor-1.28.0/crates/subfeature) Compiling rustls-pki-types v1.12.0 Compiling http-body v1.0.1 Compiling text-size v1.1.1 Compiling nohash-hasher v0.2.0 Compiling scopeguard v1.2.0 Compiling httparse v1.10.1 Compiling lock_api v0.4.14 Compiling line-index v0.1.2 Compiling icu_normalizer v2.0.0 Compiling icu_properties v2.0.1 Compiling tokio-util v0.7.16 Compiling block-buffer v0.10.4 Compiling crypto-common v0.1.6 Compiling untrusted v0.9.0 Compiling utf8parse v0.2.2 Compiling ref-cast v1.0.25 Compiling rustls v0.23.34 Compiling tower-service v0.3.3 Compiling anstyle-parse v1.0.0 Compiling digest v0.10.7 Compiling idna_adapter v1.2.1 Compiling ref-cast-impl v1.0.25 Compiling cpufeatures v0.2.17 Compiling subtle v2.6.1 Compiling fnv v1.0.7 Compiling utf8_iter v1.0.4 Compiling colorchoice v1.0.4 Compiling portable-atomic v1.13.1 Compiling anstyle-query v1.1.4 Compiling try-lock v0.2.5 Compiling is_terminal_polyfill v1.70.2 Compiling getrandom v0.4.2 Compiling thiserror v1.0.69 Compiling atomic-waker v1.1.2 Compiling h2 v0.4.13 Compiling anstream v1.0.0 Compiling want v0.3.1 Compiling idna v1.1.0 Compiling num-integer v0.1.46 Compiling thiserror-impl v1.0.69 Compiling form_urlencoded v1.2.2 Compiling concurrent-queue v2.5.0 Compiling sync_wrapper v1.0.2 Compiling borrow-or-share v0.2.4 Compiling either v1.16.0 Compiling tower-layer v0.3.3 Compiling pin-utils v0.1.0 Compiling parking v2.2.1 Compiling tower v0.5.2 Compiling event-listener v5.4.1 Compiling parking_lot v0.12.5 Compiling futures-executor v0.3.32 Compiling miette-derive v5.10.0 Compiling crossbeam-epoch v0.9.18 Compiling hyper v1.7.0 Compiling unicode-width v0.1.14 Compiling clap_lex v1.0.0 Compiling openssl-probe v0.1.6 Compiling base64 v0.22.1 Compiling powerfmt v0.2.0 Compiling ipnet v2.11.0 Compiling strsim v0.11.1 Compiling same-file v1.0.6 Compiling zerocopy v0.8.27 Compiling tree-sitter-iter v1.28.0 (/build/zizmor/src/zizmor-1.28.0/crates/tree-sitter-iter) Compiling lazy_static v1.5.0 Compiling yamlpath v1.28.0 (/build/zizmor/src/zizmor-1.28.0/crates/yamlpath) Compiling heck v0.5.0 Compiling hyper-util v0.1.17 Compiling clap_derive v4.6.1 Compiling walkdir v2.5.0 Compiling clap_builder v4.6.0 Compiling miette v5.10.0 Compiling deranged v0.5.4 Compiling rustls-native-certs v0.8.1 Compiling futures v0.3.32 Compiling uuid v1.23.0 Compiling event-listener-strategy v0.5.4 Compiling url v2.5.7 Compiling num-bigint v0.4.6 Compiling sha2 v0.10.9 Compiling sha-1 v0.10.1 Compiling github-actions-models v1.28.0 (/build/zizmor/src/zizmor-1.28.0/crates/github-actions-models) Compiling ahash v0.8.12 Compiling object v0.37.3 Compiling num-conv v0.2.0 Compiling base64 v0.21.7 Compiling adler2 v2.0.1 Compiling anyhow v1.0.103 Compiling time-core v0.1.8 Compiling arrayvec v0.7.6 Compiling simd-adler32 v0.3.7 Compiling iri-string v0.7.8 Compiling moka v0.12.11 Compiling hex v0.4.3 Compiling xxhash-rust v0.8.15 Compiling fst v0.4.7 Compiling ssri v9.2.0 Compiling num-rational v0.4.2 Compiling miniz_oxide v0.8.9 Compiling tower-http v0.6.8 Compiling vte v0.15.0 Compiling time v0.3.47 Compiling clap v4.6.1 Compiling async-lock v3.4.1 Compiling serde_urlencoded v0.7.1 Compiling num-iter v0.1.45 Compiling sha1 v0.10.6 Compiling num-complex v0.4.6 Compiling tokio-stream v0.1.17 Compiling http-body-util v0.1.3 Compiling http-serde v2.1.1 Compiling cobs v0.3.0 Compiling crossbeam-channel v0.5.15 Compiling bstr v1.12.0 Compiling reflink-copy v0.1.28 Compiling csv-core v0.1.13 Compiling tikv-jemalloc-sys v0.7.1+5.3.1-0-g81034ce1f1373e37dc865038e1bc8eeecf559ce8 Compiling memmap2 v0.5.10 Compiling encoding_rs v0.8.35 Compiling gimli v0.32.3 Compiling tagptr v0.2.0 Compiling bit-vec v0.8.0 Compiling unicode-general-category v1.1.0 Compiling crc32fast v1.5.0 Compiling mime v0.3.17 Compiling bit-set v0.8.0 Compiling cacache v13.1.0 Compiling csv v1.4.0 Compiling http-cache-semantics v3.0.0 Compiling postcard v1.1.3 Compiling addr2line v0.25.1 Compiling num v0.4.3 Compiling vt100 v0.16.2 Compiling yamlpatch v1.28.0 (/build/zizmor/src/zizmor-1.28.0/crates/yamlpatch) Compiling sharded-slab v0.1.7 Compiling fluent-uri v0.3.2 Compiling fluent-uri v0.4.1 Compiling github-actions-expressions v1.28.0 (/build/zizmor/src/zizmor-1.28.0/crates/github-actions-expressions) Compiling tracing-log v0.2.0 Compiling async-trait v0.1.89 Compiling matchers v0.2.0 Compiling tree-sitter-powershell v0.26.4 Compiling tree-sitter-bash v0.25.1 Compiling serde_spanned v1.1.1 Compiling toml_datetime v1.1.1+spec-1.1.0 Compiling thread_local v1.1.9 Compiling unit-prefix v0.5.1 Compiling predicates-core v1.0.9 Compiling camino v1.2.4 Compiling toml_writer v1.1.1+spec-1.1.0 Compiling outref v0.5.2 Compiling micromap v0.3.0 Compiling owo-colors v4.3.0 Compiling httpdate v1.0.3 Compiling hashbrown v0.14.5 Compiling nu-ansi-term v0.50.3 Compiling rustc-demangle v0.1.26 Compiling vsimd v0.8.0 Compiling tracing-subscriber v0.3.23 Compiling backtrace v0.3.76 Compiling dashmap v6.1.0 Compiling uuid-simd v0.8.0 Compiling referencing v0.47.0 Compiling http-cache v1.0.0-alpha.6 Compiling toml v1.1.1+spec-1.1.0 Compiling indicatif v0.18.6 Compiling ls-types v0.0.2 Compiling zizmor v1.28.0 (/build/zizmor/src/zizmor-1.28.0/crates/zizmor) Compiling fraction v0.15.3 Compiling fancy-regex v0.18.0 Compiling globset v0.4.18 Compiling clap_complete v4.6.7 Compiling crossbeam-deque v0.8.6 Compiling itertools v0.14.0 Compiling email_address v0.2.9 Compiling zizmor-sarif v1.28.0 (/build/zizmor/src/zizmor-1.28.0/crates/zizmor-sarif) Compiling xattr v1.6.1 Compiling jsonschema-regex v0.47.0 Compiling sysinfo v0.38.4 Compiling filetime v0.2.26 Compiling assert_cmd v2.2.2 Compiling bitflip v0.1.0 Compiling data-encoding v2.9.0 Compiling termtree v0.5.1 Compiling num-cmp v0.1.0 Compiling difflib v0.4.0 Compiling bytecount v0.6.9 Compiling typomania v0.2.0 Compiling jsonschema v0.47.0 Compiling predicates v3.1.3 Compiling human-panic v2.0.8 Compiling predicates-tree v1.0.12 Compiling tar v0.4.46 Compiling ignore v0.4.28 Compiling clap_complete_nushell v4.6.0 Compiling flate2 v1.1.9 Compiling tracing-indicatif v0.3.14 Compiling clap-verbosity-flag v3.0.4 Compiling itertools v0.15.0 Compiling annotate-snippets v0.12.16 Compiling wait-timeout v0.2.1 Compiling etcetera v0.11.0 Compiling terminal-link v0.1.0 Compiling tower-lsp-server v0.23.0 Compiling tikv-jemallocator v0.7.0 Compiling rustls-webpki v0.103.13 Compiling tokio-rustls v0.26.4 Compiling hyper-rustls v0.27.7 Compiling rustls-platform-verifier v0.6.1 Compiling reqwest v0.13.4 Compiling reqwest-middleware v0.5.2 Compiling http-cache-reqwest v1.0.0-alpha.6 Finished `test` profile [unoptimized + debuginfo] target(s) in 2m 12s Running unittests src/lib.rs (target/debug/deps/github_actions_expressions-eb23176b8bd50b03) running 45 tests test call::tests::test_consteval_case ... ok test call::tests::test_consteval_fromjson_error_cases ... ok test call::tests::test_consteval_fromjson ... ok test call::tests::test_consteval_fromjson_display_format ... ok test call::tests::test_consteval_contains ... ok test call::tests::test_consteval_format_error_cases ... ok test call::tests::test_consteval_endswith ... ok test call::tests::test_consteval_format ... ok test call::tests::test_consteval_tojson_fromjson_roundtrip ... ok test call::tests::test_consteval_startswith ... ok test call::tests::test_consteval_join ... ok test call::tests::test_function_new ... ok test context::tests::test_contextpattern_new ... ok test call::tests::test_evaluate_constant_functions ... ok test context::tests::test_single_tail ... ok test literal::tests::test_evaluate_constant_literals ... ok test context::tests::test_context_child_of ... ok test context::tests::test_contextpattern_parent_of ... ok test context::tests::test_context_pattern_matches ... ok test context::tests::test_context_as_pattern ... ok test tests::test_evaluation_result_to_boolean ... ok test op::tests::test_cross_type_comparison_with_whitespace ... ok test tests::test_evaluation_sema_display ... ok test op::tests::test_evaluate_constant_binary_operations ... ok test tests::test_expr_contexts ... ok test tests::test_expr_constant_reducible ... ok test tests::test_evaluate_constant_complex_expressions ... ok test tests::test_expr_commutative_matches ... ok test tests::test_expr_dataflow_contexts ... ok test tests::test_case_insensitive_string_comparison ... ok test tests::test_evaluation_result_to_number ... ok test tests::test_expr_has_constant_reducible_subexpr ... ok test tests::test_literal_as_str ... ok test tests::test_github_actions_logical_semantics ... ok test tests::test_parse_call_rule ... ok test tests::test_literal_string_borrows ... ok test tests::test_leaf_expressions ... ok test tests::test_parse_expr_rule_rejects ... ok test tests::test_parse_context_rule ... ok test tests::test_parse_expr_rule ... ok test tests::test_parse_string_rule ... ok test tests::test_upper_special ... ok test tests::test_spannedexpr_computed_indices ... ok test tests::test_fragment_from_expr ... ok test tests::test_parse_snapshot ... ok test result: ok. 45 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.06s Running tests/languageservices_kat.rs (target/debug/deps/languageservices_kat-fc651f3b8a733911) running 1 test test test_upstream_kat ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.03s Running unittests src/lib.rs (target/debug/deps/github_actions_models-5856dd05c44697b7) running 17 tests test common::tests::test_bool_or_unit ... ok test action::tests::test_docker_action_uses_deserialization ... ok test common::tests::test_env_empty_value ... ok test common::expr::tests::test_expr_invalid ... ok test common::tests::test_permissions ... ok test common::tests::test_env_value_csharp_trueish ... ok test common::expr::tests::test_loe ... ok test common::expr::tests::test_expr ... ok test workflow::job::tests::test_runson_invalid_state ... ok test workflow::event::tests::test_events_count ... ok test workflow::job::tests::test_secrets ... ok test workflow::tests::test_workflow_triggers ... ok test workflow::job::tests::test_strategy_matrix_expressions ... ok test workflow::tests::test_concurrency ... ok test common::tests::test_uses_deser_reusable ... ok test workflow::job::tests::test_step_working_directory ... ok test common::tests::test_uses_parses ... ok test result: ok. 17 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.03s Running tests/test_action.rs (target/debug/deps/test_action-e4c50074d3152f2f) running 2 tests test test_setup_python ... ok test test_load_all ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running tests/test_dependabot_v2.rs (target/debug/deps/test_dependabot_v2-ab1565aa5fc6132d) running 5 tests test test_schedule_cronjob_rejected_for_non_cron ... ok test test_schedule_cron_requires_expression ... ok test test_schedule_weekly_accepts_day ... ok test test_contents ... ok test test_load_all ... ok test result: ok. 5 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running tests/test_workflow.rs (target/debug/deps/test_workflow-8c23ea8d5b750578) running 3 tests test test_pip_audit_ci ... ok test test_runs_on_expr ... ok test test_load_all ... ok test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.07s Running unittests src/lib.rs (target/debug/deps/subfeature-3791087a811962b6) running 1 test test tests::test_fragment_from_context ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running unittests src/lib.rs (target/debug/deps/tree_sitter_iter-ce325358f8bcac2e) running 1 test test tests::test_iter_is_total ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (target/debug/deps/yamlpatch-8e69c7fc91896423) running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/unit_tests.rs (target/debug/deps/unit_tests-043fbd5d6046b24b) running 107 tests test test_add_rejects_duplicate_key ... ok test test_add_root_level_path_handling ... ok test test_add_preserves_formatting ... ok test test_add_empty_flow_mapping_expansion ... ok test test_add_nested_mapping_with_comments ... ok test test_add_preserve_flow_sequence_in_block_mapping ... ok test test_add_complex_mixed_styles_permissions ... ok test test_add_preserves_flow_mapping_formatting ... ok test test_add_root_level_preserves_formatting ... ok test test_add_to_block_mapping_in_block_list_funky_indentation ... ok test test_add_to_multiline_flow_mapping ... ignored, known issue test test_add_to_multiline_flow_mapping_funky ... ignored, known issue test test_add_to_block_mapping_in_block_list ... ok test test_append_fails_on_non_sequence ... ok test test_add_to_flow_mapping_nested_in_block_list ... ok test test_add_to_flow_mapping_trailing_comma ... ok test test_append_empty_mapping ... ok test test_add_to_flow_mapping_trailing_comment ... ok test test_append_number_to_sequence ... ok test test_append_mapping_to_sequence ... ok test test_append_preserves_comments ... ok test test_append_preserves_indentation ... ok test test_comment_boundary_issue ... ok test test_append_simple_scalar_to_sequence ... ok test test_debug_comments_and_spacing ... ok test test_append_real_world_github_workflow ... ok test test_append_nested_mapping ... ok test test_append_nested_sequence ... ok test test_append_multiple_items ... ok test test_emplace_comment ... ok test test_emplace_comment_crlf ... ok test test_debug_indentation_issue ... ok test test_detect_style ... ok test test_emplace_comment_fails_on_too_many_comments ... ok test test_debug_merge_into_env_issue ... ok test test_emplace_comment_on_block_string ... ok test test_emplace_comment_on_dq_string ... ok test test_emplace_comment_on_empty_feature - should panic ... ok test test_emplace_comment_on_empty_list ... ok test test_emplace_comment_on_empty_object ... ok test test_emplace_comment_on_list_element ... ok test test_emplace_comment_on_multiline_string - should panic ... ok test test_emplace_comment_on_sq_string ... ok test test_emplace_comment_overwrites_existing_comment ... ok test test_empty_mapping_formatting ... ok test test_extract_leading_indentation_for_block_item ... ok test test_extract_leading_whitespace ... ok test test_merge_into_complex_env_mapping ... ok test test_find_content_end ... ok test test_full_demo_workflow ... ok test test_merge_into_existing_key ... ok test test_merge_into_key_missing_body ... ignored, known issue with empty body handling test test_merge_into_new_key ... ok test test_merge_into_preserves_comments_in_env_block ... ok test test_merge_into_reuses_existing_key_no_duplicates ... ok test test_preserve_trailing_newline_add_simple_at_end ... ok test test_no_empty_lines_after_insertion ... ok test test_merge_into_flow_mapping ... ok test test_merge_into_prevents_duplicate_keys ... ok test test_multiple_operations_preserve_comments ... ok test test_merge_into_with_mapping_merge_behavior ... ok test test_merge_into_with_unicode ... ok test test_preserve_trailing_newline_no_newline_original ... ok test test_preserve_trailing_newline_add_to_nested_mapping_at_end ... ok test test_preserve_trailing_newline_replace_at_end ... ok test test_mixed_flow_block_styles_github_workflow ... ok test test_preserve_trailing_newline_replace_nested_at_end ... ok test test_preserve_trailing_newline_replace_comment_at_end ... ok test test_preserve_trailing_newline_when_adding_at_end ... ok test test_remove_block_sequence_member ... ok test test_preserve_trailing_newline_replace_multiline_at_end ... ok test test_remove_block_valued_key_removes_subtree ... ok test test_remove_collapses_nested_block_chain ... ok test test_remove_collapses_empty_block_sequence_parent ... ok test test_remove_does_not_follow_final_alias ... ok test test_remove_collapses_empty_block_mapping_parent ... ok test test_remove_first_step_key_slides_nested_sibling_onto_marker ... ok test test_remove_flow_member_preserves_trailing_line_comment ... ok test test_remove_collapse_stops_at_populated_ancestor ... ok test test_remove_flow_sequence_member_nested_in_block_mapping ... ok test test_remove_multiline_flow_mapping_member ... ok test test_remove_flow_mapping_member ... ok test test_remove_flow_sequence_member ... ok test test_remove_non_first_step_key_keeps_marker ... ok test test_remove_preserves_structure ... ok test test_remove_nested_flow_collections ... ok test test_remove_sole_env_key_preserves_step_sequence_marker ... ok test test_remove_sole_flow_member_does_not_collapse_parent ... ok test test_remove_sole_flow_member_collapses_with_spaces ... ok test test_replace_comment_fails_on_too_many_comments ... ok test test_replace_comment ... ok test test_reparse_exact_extracted ... ok test test_replace_comment_noop ... ok test test_replace_empty_flow_value_no_colon ... ok test test_replace_empty_flow_value ... ok test test_replace_multiline_string ... ok test test_replace_value_in_flow_mapping_within_block_context ... ok test test_replace_empty_block_value ... ok test test_step_content_end_detection ... ok test test_serialize_flow ... ok test test_step_insertion_with_comments ... ok test test_yaml_patch_replace_preserves_comments ... ok test test_rewrite_fragment_single_line ... ok test test_preserve_trailing_newline_rewrite_fragment_at_end ... ok test test_rewrite_fragment_entire_doc ... ok test test_rewrite_fragment_multi_line_in_list ... ok test test_rewrite_fragment_multi_line ... ok test result: ok. 104 passed; 0 failed; 3 ignored; 0 measured; 0 filtered out; finished in 0.06s Running unittests src/lib.rs (target/debug/deps/yamlpath-e3684433bd4feeba) running 13 tests test tests::test_document_preserves_leading_trailing_whitespace ... ok test tests::test_anchor_map ... ok test tests::test_basic ... ok test tests::test_feature_comments ... ok test tests::test_duplicate_anchors ... ok test tests::test_query_builder ... ok test tests::test_location_spanned_by_comment ... ok test tests::test_offset_inside_comment ... ok test tests::test_query_parent ... ok test tests::test_sequence_alias_not_flattened ... ok test tests::test_top_feature ... ok test tests::test_feature_kind ... ok test tests::test_inline_anchor_alias_patterns ... ok test result: ok. 13 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/integration_test.rs (target/debug/deps/integration_test-978b1401512f1f12) running 1 test test test_integration ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.04s Running unittests src/main.rs (target/debug/deps/zizmor-043e3107e83c6cfa) running 116 tests test audit::artipacked::tests::test_determine_severity ... ok test audit::adhoc_packages::tests::test_is_adhoc_install_command ... ok test audit::artipacked::tests::test_fix_title_and_description ... ok test audit::artipacked::tests::test_is_checkout_v6_or_higher_offline ... ok test audit::bot_conditions::tests::test_bot_condition ... ok test audit::bot_conditions::tests::test_fix_with_complex_conditions ... ok test audit::bot_conditions::tests::test_replace_actor_fix ... ok test audit::bot_conditions::tests::test_all_fixes_together ... ok test audit::artipacked::tests::test_fix_creates_with_block_when_missing ... ok test audit::artipacked::tests::test_fix_merges_into_existing_with_block ... ok test audit::cache_poisoning::tests::test_cache_disable_fix_non_configurable ... ok test audit::cache_poisoning::tests::test_cache_disable_fix_opt_in_string ... ok test audit::cache_poisoning::tests::test_cache_disable_fix_opt_in_boolean ... ok test audit::cache_poisoning::tests::test_cache_disable_fix_opt_out_boolean ... ok test audit::bot_conditions::tests::test_event_specific_contexts ... ok test audit::dependabot_cooldown::tests::test_no_fix_needed_for_sufficient_cooldown ... ok test audit::dependabot_cooldown::tests::test_fix_insufficient_default_days ... ok test audit::dependabot_execution::tests::test_fix_allow_to_deny ... ok test audit::dependabot_execution::tests::test_no_fix_needed_for_deny ... ok test audit::dependabot_cooldown::tests::test_fix_missing_default_days ... ok test audit::dependabot_cooldown::tests::test_fix_missing_cooldown ... ok test audit::dependabot_execution::tests::test_no_fix_needed_when_omitted ... ok test audit::dependabot_cooldown::tests::test_fix_multiple_updates ... ok test audit::insecure_commands::tests::test_fix_removes_insecure_commands_preserves_others ... ok test audit::insecure_commands::tests::test_insecure_commands_fix_generation ... ok test audit::dependabot_execution::tests::test_fix_multiple_updates ... ok test audit::insecure_commands::tests::test_workflow_level_insecure_commands_fix ... ok test audit::insecure_commands::tests::test_string_value_insecure_commands_fix ... ok test audit::github_env::tests::test_exploitable_cmd_patterns ... ok test audit::insecure_commands::tests::test_step_level_insecure_commands_fix ... ok test audit::known_vulnerable_actions::tests::test_fix_symbolic_ref ... ok test audit::known_vulnerable_actions::tests::test_fix_upgrade_actions_checkout ... ok test audit::known_vulnerable_actions::tests::test_fix_upgrade_actions_setup_node ... ok test audit::known_vulnerable_actions::tests::test_first_patched_version_priority ... ok test audit::known_vulnerable_actions::tests::test_fix_upgrade_multiple_vulnerable_actions ... ok test audit::known_vulnerable_actions::tests::test_offline_audit_state_creation ... ok test audit::obfuscation::tests::test_obfuscation_fix_uses_path_empty_components ... ok test audit::known_vulnerable_actions::tests::test_fix_upgrade_action_with_subpath ... ok test audit::obfuscation::tests::test_obfuscation_fix_uses_path_double_dot ... ok test audit::overprovisioned_secrets::tests::test_secrets_expansions ... ok test audit::obfuscation::tests::test_obfuscation_fix_uses_path_dot ... ok test audit::template_injection::tests::test_capability_from_context ... ok test audit::template_injection::tests::test_context_to_env_var ... ok test audit::ref_version_mismatch::tests::test_version_comment_pattern ... ok test audit::template_injection::tests::test_template_injection_fix_bash_shell ... ok test audit::obfuscation::tests::test_obfuscation_fix_static_evaluation ... ok test audit::template_injection::tests::test_template_injection_fix_bash_shell_full_path ... ok test audit::template_injection::tests::test_template_injection_fix_default_shell_ubuntu ... ok test audit::template_injection::tests::test_template_injection_fix_cmd_shell ... ok test audit::template_injection::tests::test_template_injection_fix_cmd_shell_with_custom_env ... ok test audit::template_injection::tests::test_template_injection_fix_default_shell_windows ... ok test audit::ref_version_mismatch::tests::test_add_version_comment_fix_for_composite_action ... ok test audit::ref_version_mismatch::tests::test_comment_version_state_with_unrelated_comment ... ok test audit::template_injection::tests::test_template_injection_fix_github_actor ... ok test audit::template_injection::tests::test_template_injection_fix_github_ref_name ... ok test audit::template_injection::tests::test_template_injection_fix_no_env_overcorrection ... ok test audit::template_injection::tests::test_template_injection_fix_pwsh_shell ... ok test audit::template_injection::tests::test_template_injection_fix_with_existing_env ... ok test audit::template_injection::tests::test_template_injection_no_fix_unknown_shell ... ok test audit::template_injection::tests::test_template_injection_fix_duplicate_expressions ... ok test audit::template_injection::tests::test_template_injection_no_fix_for_action_sinks ... ok test audit::unredacted_secrets::tests::test_secret_leakages ... ok test audit::template_injection::tests::test_template_injection_unicode_in_script ... ok test audit::unsound_condition::tests::test_multiline_expression_fix ... ok test audit::unsound_condition::tests::test_folded_block_fix ... ok test audit::unsound_condition::tests::test_complex_multiline_fix ... ok test audit::template_injection::tests::test_template_injection_fix_multiple_expressions ... ok test audit::template_injection::tests::test_template_injection_fix_equivalent_expressions ... ok test audit::unsound_condition::tests::test_reusable_job_fix ... ok test audit::unsound_contains::tests::test_bot_condition ... ok test audit::use_trusted_publishing::tests::test_is_publish_command ... ok test audit::unsound_ternary::tests::test_unsound_true_values ... ok test config::tests::test_parse_workflow_rule ... ok test audit::unsound_condition::tests::test_simple_literal_block_fix ... ok test audit::unsound_condition::tests::test_no_fix_needed_cases ... ok test audit::unsound_condition::tests::test_multiple_fixes_together ... ok test finding::location::tests::test_comment_ignores ... ok test github::pktline::tests::test_data_packet ... ok test github::pktline::tests::test_delim_packet ... ok test github::pktline::tests::test_decode_invalid_cases ... ok test github::pktline::tests::test_data_size_invariant ... ok test github::pktline::tests::test_error_packet ... ok test github::pktline::tests::test_flush_packet ... ok test github::tests::test_github_host ... ok test github::tests::test_tag_sha_to_commit_sha ... ignored test github::tests::test_github_token_err ... ok test github::tests::test_github_token ... ok test models::coordinate::tests::test_freestring_control ... ok test github::lineref::tests::test_iterator ... ok test models::tests::test_if_is_statically_false ... ok test models::uses::tests::test_repositoryusespattern_ord ... ok test models::version::tests::parse_invalid_versions ... ok test models::version::tests::compare_versions ... ok test models::coordinate::tests::test_usage ... ok test models::workflow::matrix::tests::test_indirect_matrix_expands_to_static_values ... ok test models::version::tests::parse_valid_versions ... ok test models::uses::tests::test_repositoryusespattern_matches ... ok test models::uses::tests::test_repositoryusespattern_parse ... ok test output::sarif::tests::test_resultkind_from_severity ... ok test registry::input::tests::test_input_key_display ... ok test registry::input::tests::test_input_key_local_best_identifier ... ok test registry::input::tests::test_input_key_local_presentation_path ... ok test registry::input::tests::test_discover_root_respects_ceiling ... ok test utils::tests::split_patterns ... ok test models::workflow::tests::test_workflow_has_inputs ... ok test utils::tests::test_env_is_static_default ... ok test utils::tests::test_extract_fenced_expressions ... ok test utils::tests::test_extract_fenced_expression ... ok test utils::tests::test_normalize_shell ... ok test utils::tests::test_extract_fenced_expressions_from_routable ... ok test models::workflow::matrix::tests::test_matrix_expanded_values ... ok test models::workflow::matrix::tests::test_direct_matrix_expands_to_static_values ... ok test utils::tests::test_extract_fenced_expressions_from_routable_spans ... ok test audit::known_vulnerable_actions::tests::test_fix_upgrade_third_party_action ... ok test audit::github_env::tests::test_exploitable_pwsh_patterns ... ok test audit::github_env::tests::test_exploitable_bash_patterns ... ok test result: ok. 115 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 2.22s Running tests/integration/main.rs (target/debug/deps/integration-fada58a2660a7d15) running 221 tests test audit::archived_uses::test_composite_action ... ok test audit::anonymous_definition::test_regular_persona ... ok test audit::artipacked::test_composite_action ... ok test audit::artipacked::test_auditor_persona ... ok test audit::archived_uses::test_regular_persona ... ok test audit::anonymous_definition::test_pedantic_persona ... ok test audit::artipacked::test_issue_1709 ... ok test audit::adhoc_packages::test_adhoc_packages ... ok test audit::artipacked::test_pedantic_persona ... ok test audit::cache_poisoning::test_caching_enabled_by_default ... ok test audit::artipacked::test_regular_persona ... ok test audit::cache_poisoning::test_caching_disabled_by_default ... ok test audit::artipacked::test_issue_447 ... ok test audit::artipacked::test_issue_1769 ... ok test audit::bot_conditions::test_regular_persona ... ok test audit::cache_poisoning::test_caching_not_configurable ... ok test audit::cache_poisoning::test_caching_opt_in_boolish_toggle ... ok test audit::cache_poisoning::test_caching_opt_in_boolean_toggle ... ok test audit::cache_poisoning::test_caching_opt_in_expression ... ok test audit::cache_poisoning::test_caching_opt_out ... ok test audit::cache_poisoning::test_issue_1081 ... ok test audit::cache_poisoning::test_caching_opt_in_multi_value_toggle ... ok test audit::cache_poisoning::test_issue_1152 ... ok test audit::cache_poisoning::test_issue_1485 ... ok test audit::cache_poisoning::test_issue_1940 ... ok test audit::cache_poisoning::test_issue_378 ... ok test audit::cache_poisoning::test_issue_642 ... ok test audit::cache_poisoning::test_issue_343 ... ok test audit::cache_poisoning::test_no_cache_aware_steps ... ok test audit::cache_poisoning::test_publisher_step ... ok test audit::cache_poisoning::test_ramsey_composer_install_action ... ok test audit::cache_poisoning::test_trigger_heuristics_tag_and_branch ... ok test audit::cache_poisoning::test_trigger_heuristics_tag_and_release ... ok test audit::cache_poisoning::test_workflow_tag_trigger ... ok test audit::cache_poisoning::test_trigger_heuristics_tag_only ... ok test audit::cache_poisoning::test_workflow_release_trigger_object ... ok test audit::cache_poisoning::test_workflow_release_branch_trigger ... ok test audit::dependabot_cooldown::test_config_not_number ... ok test audit::concurrency_limits::test_issue_1511 ... ok test audit::concurrency_limits::test_cancel_false ... ok test audit::dependabot_cooldown::test_invalid_config_negative_days ... ok test audit::dependabot_cooldown::test_invalid_config_zero_days ... ok test audit::concurrency_limits::test_jobs_missing_no_cancel ... ok test audit::dependabot_cooldown::test_config_short_cooldown_permitted ... ok test audit::dependabot_cooldown::test_default_days_too_short ... ok test audit::concurrency_limits::test_missing ... ok test audit::dependabot_cooldown::test_missing_cooldown ... ok test audit::dependabot_cooldown::test_multi_ecosystem_group_with_cooldown ... ok test audit::dependabot_cooldown::test_no_default_days ... ok test audit::concurrency_limits::test_no_cancel ... ok test audit::dangerous_triggers::test_actions_labeler_exception ... ok test audit::dependabot_cooldown::test_opentofu_cooldown ... ok test audit::dependabot_execution::test_regular_persona ... ok test audit::excessive_permissions::test_issue_336_repro ... ok test audit::excessive_permissions::test_reusable_workflow_call ... ok test audit::excessive_permissions::test_issue_336_repro_pedantic ... ok test audit::excessive_permissions::test_issue_472_repro ... ok test audit::excessive_permissions::test_jobs_broaden_permissions ... ok test audit::excessive_permissions::test_reusable_workflow_other_triggers ... ok test audit::excessive_permissions::test_workflow_default_perms_all_jobs_explicit ... ok test audit::excessive_permissions::test_workflow_default_perms_pedantic ... ok test audit::excessive_permissions::test_workflow_empty_perms ... ok test audit::excessive_permissions::test_workflow_read_all ... ok test audit::forbidden_uses::test_config_invalid_pattern ... ok test audit::excessive_permissions::test_workflow_write_all ... ok test audit::forbidden_uses::test_config_invalid_variant ... ok test audit::excessive_permissions::test_workflow_write_explicit ... ok test audit::forbidden_uses::test_allow_all ... ok test audit::forbidden_uses::test_allow_some ... ok test audit::forbidden_uses::test_allow_some_refs ... ok test audit::github_env::test_action ... ok test audit::forbidden_uses::test_deny_all ... ok test audit::impostor_commit::test_peels_tag_sha_to_commit_sha ... ignored test audit::impostor_commit::test_regular_persona ... ignored test audit::forbidden_uses::test_deny_some_refs ... ok test audit::github_env::test_issue_1333 ... ok test audit::forbidden_uses::test_deny_some ... ok test audit::github_env::test_github_path ... ok test audit::known_vulnerable_actions::test_config_allow ... ignored test audit::known_vulnerable_actions::test_default_persona ... ignored test audit::github_app::test_regular_persona ... ok test audit::github_env::test_issue_2200 ... ok test audit::insecure_commands::test_action_auditor ... ok test audit::github_env::test_issue_397_repro ... ok test audit::insecure_commands::test_insecure_commands_auditor ... ok test audit::insecure_commands::test_insecure_commands_default ... ok test audit::insecure_commands::test_issue_839_repro ... ok test audit::misfeature::test_non_well_known_shell ... ok test audit::ref_confusion::test_issue_518_repro ... ignored test audit::ref_confusion::test_ref_confusion ... ignored test audit::ref_version_mismatch::test_issue_1853 ... ignored test audit::ref_version_mismatch::test_issue_1869 ... ignored test audit::ref_version_mismatch::test_issue_1899 ... ignored test audit::ref_version_mismatch::test_issue_1938 ... ignored test audit::ref_version_mismatch::test_issue_2039 ... ignored test audit::ref_version_mismatch::test_issue_2165 ... ignored test audit::ref_version_mismatch::test_missing_version_comment_pedantic ... ignored test audit::ref_version_mismatch::test_nested_annotated_tags ... ignored test audit::ref_version_mismatch::test_ref_version_mismatch ... ignored test audit::misfeature::test_setup_python_pip_install ... ok test audit::obfuscation::test_computed_indices_pedantic ... ok test audit::obfuscation::test_issue_1177_repro_pedantic ... ok test audit::secrets_inherit::secrets_inherit ... ok test audit::secrets_outside_env::test_config_invalid_variant ... ok test audit::obfuscation::test_issue_1769 ... ok test audit::misfeature::test_issue_1414_repro ... ok test audit::overprovisioned_secrets::overprovisioned_secrets ... ok test audit::secrets_outside_env::test_config_allow_none ... ok test audit::obfuscation::test_obfuscation ... ok test audit::secrets_outside_env::test_config_allow_one ... ok test audit::secrets_outside_env::test_config_allow_some ... ok test audit::secrets_outside_env::test_secrets_outside_env ... ok test audit::secrets_outside_env::test_issue_2157 ... ok test audit::self_hosted_runner::test_issue_283_repro ... ok test audit::stale_action_refs::test_pedantic_persona ... ignored test audit::self_hosted_runner::test_self_hosted_auditor ... ok test audit::self_hosted_runner::test_self_hosted_default ... ok test audit::self_hosted_runner::test_self_hosted_matrix_dimension ... ok test audit::self_hosted_runner::test_self_hosted_matrix_exclusion ... ok test audit::self_hosted_runner::test_self_hosted_matrix_inclusion ... ok test audit::self_hosted_runner::test_self_hosted_runner_group ... ok test audit::self_hosted_runner::test_self_hosted_runner_label ... ok test audit::superfluous_actions::test_superfluous_actions ... ok test audit::template_injection::test_codeql_sinks ... ok test audit::template_injection::test_false_positive_menagerie ... ok test audit::template_injection::test_issue_1664 ... ok test audit::template_injection::test_issue_1903 ... ok test audit::template_injection::test_issue_339_repro ... ok test audit::template_injection::test_issue_2197 ... ok test audit::template_injection::test_issue_22_repro ... ok test audit::template_injection::test_issue_1638 ... ok test audit::template_injection::test_issue_418_repro ... ok test audit::template_injection::test_issue_749_repro ... ok test audit::template_injection::test_issue_1802 ... ok test audit::template_injection::test_issue_883_repro_action ... ok test audit::template_injection::test_issue_988_repro_pedantic ... ok test audit::template_injection::test_pr_317_repro ... ok test audit::template_injection::test_pr_425_backstop_action ... ok test audit::template_injection::test_multiline_expression_pedantic ... ok test audit::template_injection::test_pwsh_script ... ok test audit::template_injection::test_template_injection_dynamic_matrix ... ok test audit::template_injection::test_template_injection_static_matrix ... ok test audit::template_injection::test_static_env ... ok test audit::typosquat_uses::test_regular_persona ... ok test audit::undocumented_permissions::test_contents_read_only_pedantic ... ok test audit::undocumented_permissions::test_contents_read_with_other_pedantic ... ok test audit::undocumented_permissions::test_empty_permissions_pedantic ... ok test audit::undocumented_permissions::test_documented_permissions_pedantic ... ok test audit::unpinned_images::test_docker_action ... ok test audit::undocumented_permissions::test_undocumented_permissions_default ... ok test audit::undocumented_permissions::test_partially_documented_pedantic ... ok test audit::undocumented_permissions::test_undocumented_permissions_pedantic ... ok test audit::unpinned_images::test_issue_1942_repro ... ok test audit::unpinned_images::test_issue_2097_repro ... ok test audit::unpinned_images::test_matrix_in_image_pedantic ... ok test audit::unpinned_images::test_matrix_in_image_regular ... ok test audit::unpinned_images::test_pedantic_persona ... ok test audit::unpinned_tools::test_if_false_skipped ... ok test audit::unpinned_images::test_urllib3_empty_matrix_container_regular ... ok test audit::unpinned_uses::test_action_pedantic ... ok test audit::unpinned_tools::test_regular_persona ... ok test audit::unpinned_uses::test_invalid_policy_syntax_1 ... ok test audit::unpinned_uses::test_invalid_policy_syntax_2 ... ok test audit::unpinned_uses::test_invalid_policy_syntax_3 ... ok test audit::unpinned_uses::test_composite_config ... ok test audit::unpinned_uses::test_invalid_wrong_policy_object ... ok test audit::unpinned_uses::test_invalid_policy_syntax_4 ... ok test audit::unpinned_uses::test_composite_config_2 ... ok test audit::unpinned_uses::test_invalid_policy_syntax_5 ... ok test audit::unpinned_uses::test_invalid_policy_syntax_6 ... ok test audit::unpinned_uses::test_default_config ... ok test audit::unpinned_uses::test_empty_config ... ok test audit::unpinned_uses::test_hash_pin_everything_config ... ok test audit::unpinned_uses::test_reusable_workflow_unpinned ... ok test audit::unpinned_uses::test_issue_433_repro ... ok test audit::unpinned_uses::test_issue_1543_repro ... ok test audit::unpinned_uses::test_issue_659_repro ... ok test audit::unpinned_uses::test_ref_pin_everything_config ... ok test audit::unpinned_uses::test_unpinned_uses_default ... ok test audit::unpinned_uses::test_unpinned_uses_pedantic ... ok test audit::unredacted_secrets::test_normal_persona ... ok test audit::unsound_contains::test_normal_persona ... ok test audit::unsound_ternary::test_issue_746_repro ... ok test audit::unsound_condition::test_normal_persona ... ok test audit::use_trusted_publishing::test_bun_publish ... ok test audit::use_trusted_publishing::test_demo_action ... ok test audit::use_trusted_publishing::test_cargo_publish ... ok test audit::use_trusted_publishing::test_gem_push ... ok test audit::use_trusted_publishing::test_issue_1191_repro ... ok test cli::test_stdin_invalid_yaml ... ok test cli::test_stdin_empty ... ok test audit::use_trusted_publishing::test_nuget_push ... ok test audit::use_trusted_publishing::test_twine_upload ... ok test cli::test_stdin_invalid_yaml_strict ... ok test cli::test_stdin_dependabot ... ok test audit::use_trusted_publishing::test_use_trusted_publishing ... ok test audit::use_trusted_publishing::test_npm_publish ... ok test cli::test_stdin_with_fix ... ok test cli::test_stdin_with_other_inputs ... ok test cli::test_stdin_action ... ok test cli::test_stdin_valid_yaml_unknown_schema ... ok test cli::test_stdin_valid_yaml_unknown_schema_strict ... ok test cli::test_stdin_sarif_output ... ok test config::test_discovers_config_in_dotgithub_from_file_input ... ok test config::test_discovers_config_in_dotgithub ... ok test config::test_disablement ... ok test cli::test_stdin_workflow ... ok test config::test_discovers_config_in_root ... ok test config::test_discovers_config_in_root_from_child_dir ... ok test config::test_invalid_configs ... ok test config::test_discovers_config_in_root_from_file_input ... ok test config::test_discovers_dotyaml_config_in_dotgithub ... ok test config::test_ignores_config_in_dotgithub_from_file_input ... ok test config::test_ignores_config_in_root ... ok test config::test_ignores_config_in_dotgithub ... ok test config::test_ignores_config_in_root_from_child_dir ... ok test config::test_ignores_config_in_root_from_file_input ... ok test config::test_no_remap_filtered_by_min_severity ... ok test config::test_severity_remap ... ok test config::test_severity_remap_affects_min_severity ... ok test config::test_severity_remap_is_negated_by_no_config ... ok test result: ok. 205 passed; 0 failed; 16 ignored; 0 measured; 54 filtered out; finished in 4.18s Running unittests src/lib.rs (target/debug/deps/zizmor_sarif-a8f70311063dd62a) running 2 tests test tests::importance_serializes_as_lowercase_string ... ok test tests::serializes_minimal_document_in_expected_shape ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests github_actions_expressions running 1 test test crates/github-actions-expressions/src/lib.rs - Expr<'src>::consteval (line 756) ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s all doctests ran in 0.42s; merged doctests compilation took 0.41s Doc-tests github_actions_models running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests subfeature running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests tree_sitter_iter running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests yamlpatch running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests yamlpath running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests zizmor_sarif running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Static analysis for GitHub Actions Usage: zizmor [OPTIONS] ... Input Options: ... The inputs to audit. These can be individual workflow filenames, action definitions (typically `action.yml`), entire directories, or a `user/repo` slug for a GitHub repository. In the latter case, a `@ref` can be appended to audit the repository at a particular git reference state. Use `-` to read a single input from stdin. --collect ... Control which kinds of inputs are collected for auditing. By default, all workflows and composite actions are collected, while honoring `.gitignore` files. Possible values: - all: Collect all possible inputs, ignoring `.gitignore` files - default: Collect all possible inputs, respecting `.gitignore` files - workflows: Collect workflows - actions: Collect action definitions (i.e. `action.yml`) - dependabot: Collect Dependabot configuration files (i.e. `dependabot.yml`) [default: default] --strict-collection Fail instead of warning on syntax and schema errors in collected inputs Audit Options: --fix[=] Fix findings automatically, when available (EXPERIMENTAL) Possible values: - safe: Apply only safe fixes (the default) - unsafe-only: Apply only unsafe fixes - all: Apply all fixes, both safe and unsafe -p, --pedantic Emit 'pedantic' findings. This is an alias for --persona=pedantic. --persona The persona to use while auditing Possible values: - auditor: The "auditor" persona (false positives OK) - pedantic: The "pedantic" persona (code smells OK) - regular: The "regular" persona (minimal false positives) [default: regular] --min-severity Filter all results below this severity [possible values: informational, low, medium, high] --min-confidence Filter all results below this confidence [possible values: low, medium, high] --no-ignores Don't honor ignore comments or ignore rules in configuration Output Options: -v, --verbose... Increase logging verbosity -q, --quiet... Decrease logging verbosity --format The output format to emit. By default, cargo-style diagnostics will be emitted Possible values: - plain: cargo-style output - json: JSON-formatted output (currently v1) - json-v1: "v1" JSON format - sarif: SARIF-formatted output - github: GitHub Actions workflow command-formatted output [default: plain] --no-progress Don't show progress bars, even if the terminal supports them --color Control the use of color in output Possible values: - auto: Use color output if the output supports it - always: Force color output, even if the output isn't a terminal - never: Disable color output, even if the output is a compatible terminal --render-links Whether to render OSC 8 links in the output. This affects links under audit IDs, as well as any links produced by audit rules. Only affects `--format=plain` (the default). Possible values: - auto: Render OSC 8 links in output if support is detected - always: Always render OSC 8 links in output - never: Never render OSC 8 links in output [env: ZIZMOR_RENDER_LINKS=] [default: auto] --show-audit-urls Whether to render audit URLs in the output, separately from any URLs embedded in OSC 8 links. Only affects `--format=plain` (the default). Possible values: - auto: Render audit URLs in output automatically based on output format and runtime context - always: Always render audit URLs in output - never: Never render audit URLs in output [env: ZIZMOR_SHOW_AUDIT_URLS=] [default: auto] --no-exit-codes Disable all error codes besides success and tool failure Network Options: -o, --offline Perform only offline operations. This disables all online audit rules, and prevents zizmor from auditing remote repositories. [env: ZIZMOR_OFFLINE=] --gh-token The GitHub API token to use [env: GH_TOKEN or GITHUB_TOKEN or ZIZMOR_GITHUB_TOKEN] --gh-hostname The GitHub Server Hostname. Defaults to github.com [env: GH_HOST=] [default: github.com] --no-online-audits Perform only offline audits. This is a weaker version of `--offline`: instead of completely forbidding all online operations, it only disables audits that require connectivity. [env: ZIZMOR_NO_ONLINE_AUDITS=] --cache-dir The directory to use for HTTP caching. By default, a host-appropriate user-caching directory will be used Options: --lsp Run in language server mode (EXPERIMENTAL). This flag cannot be used with any other flags. -c, --config The configuration file to load. This loads a single configuration file across all input groups, which may not be what you intend [env: ZIZMOR_CONFIG=] --no-config Disable all configuration loading --completions Generate tab completion scripts for the specified shell Possible values: - bash: Bourne Again `SHell` (bash) - elvish: Elvish shell - fish: Friendly Interactive `SHell` (fish) - nushell: Nushell - powershell: `PowerShell` - zsh: Z `SHell` (zsh) --thanks Emit thank-you messages for zizmor's sponsors -h, --help Print help (see a summary with '-h') -V, --version Print version INFO zizmor: 🌈 zizmor v1.28.0 WARN audit: zizmor: zizmor is running in offline mode by default; some audits and auto-fixes will not be available. see https://docs.zizmor.sh/usage/#operating-modes for details INFO audit: zizmor: 🌈 completed crates/zizmor/tests/integration/test-data/template-injection.yml INFO zizmor: 🌈 zizmor v1.28.0 WARN audit: zizmor: zizmor is running in offline mode by default; some audits and auto-fixes will not be available. see https://docs.zizmor.sh/usage/#operating-modes for details INFO audit: zizmor: 🌈 completed crates/zizmor/tests/integration/test-data/cache-poisoning.yml ==> Entering fakeroot environment... ==> Starting package()... ==> Tidying install... -> Removing libtool files... -> Removing static library files... -> Purging unwanted files... -> Stripping unneeded symbols from binaries and libraries... -> Compressing man and info pages... ==> Checking for packaging issues... ==> Creating package "zizmor"... -> Generating .PKGINFO file... -> Generating .BUILDINFO file... -> Generating .MTREE file... -> Compressing package... ==> Leaving fakeroot environment. ==> Finished making: zizmor 1.28.0-1 (Sat Jul 25 20:51:41 2026) ==> Installing package zizmor with pacman -U... loading packages... resolving dependencies... looking for conflicting packages... Package (1) New Version Net Change zizmor 1.28.0-1 18.54 MiB Total Installed Size: 18.54 MiB :: Proceed with installation? [Y/n] checking keyring... checking package integrity... loading package files... checking for file conflicts... :: Processing package changes... installing zizmor... :: Running post-transaction hooks... (1/1) Arming ConditionNeedsUpdate... resolving dependencies... looking for conflicting packages... Package (6) New Version Net Change core/licenses 20240728-1 1.54 MiB extra-testing/pyalpm 0.11.1-1 0.25 MiB extra-testing/python-boolean.py 5.0-2 0.36 MiB extra-testing/python-license-expression 30.4.4-2 1.24 MiB extra-testing/python-pyelftools 0.33-1 2.57 MiB extra-testing/namcap 3.6.0-3 1.00 MiB Total Installed Size: 6.96 MiB :: Proceed with installation? [Y/n] :: Retrieving packages... pyalpm-0.11.1-1-aarch64 downloading... checking keyring... checking package integrity... loading package files... checking for file conflicts... :: Processing package changes... installing licenses... installing pyalpm... installing python-boolean.py... installing python-license-expression... installing python-pyelftools... installing namcap... :: Running post-transaction hooks... (1/1) Arming ConditionNeedsUpdate... Checking PKGBUILD Checking zizmor-1.28.0-1-aarch64.pkg.tar.zst zizmor W: Referenced library 'libm.so.6' is an uninstalled dependency (needed in files ['usr/bin/zizmor']) zizmor W: Referenced library 'ld-linux-aarch64.so.1' is an uninstalled dependency (needed in files ['usr/bin/zizmor']) zizmor W: Referenced library 'libgcc_s.so.1' is an uninstalled dependency (needed in files ['usr/bin/zizmor']) zizmor W: Referenced library 'libc.so.6' is an uninstalled dependency (needed in files ['usr/bin/zizmor']) zizmor W: Dependency included, but may not be needed ('glibc') zizmor W: Dependency included, but may not be needed ('libgcc') ==> Running checkpkg -> Downloading current versions Note: in a future version of systemd-nspawn the default set of permitted socket address families will be restricted to AF_INET, AF_INET6 and AF_UNIX. Use --restrict-address-families= to configure the set of permitted socket address families, or set RestrictAddressFamilies= in a .nspawn file. Package (1) Old Version New Version Net Change Download Size extra-testing/zizmor 1.28.0-1 1.27.0-1 0.02 MiB 5.63 MiB Total Download Size: 5.63 MiB :: Proceed with download? [Y/n] :: Retrieving packages... zizmor-1.27.0-1-aarch64 downloading... checking keyring... checking package integrity... -> Checking packages ==> No soname differences for zizmor. [?25h==> Generating .SRCINFO...done ==> Finished building zizmor 1.28.0-1 [?25h