Add ep to moe test for chunking #4627
Triggered via pull request
July 28, 2026 20:44
Shuwen-Fang
Shuwen-Fang
synchronize
#4631
Status
Failure
Total duration
1m 17s
Artifacts
2
github_actions_scan.yml Required
on: pull_request_target
Annotations
13 errors and 4 warnings
|
zizmor-output
Process completed with exit code 1.
|
|
zizmor/template-injection:
.github/workflows/run_tests_coordinator.yml#L89
code injection via template expansion: may expand into attacker-controllable code
|
|
zizmor/unpinned-uses:
.github/workflows/run_tests_against_package.yml#L238
unpinned action reference: action is not pinned to a hash (required by blanket policy)
|
|
zizmor/unpinned-uses:
.github/workflows/run_tests_against_package.yml#L231
unpinned action reference: action is not pinned to a hash (required by blanket policy)
|
|
zizmor/unpinned-uses:
.github/workflows/run_tests_against_package.yml#L105
unpinned action reference: action is not pinned to a hash (required by blanket policy)
|
|
zizmor/unpinned-uses:
.github/workflows/ci_pipeline.yml#L57
unpinned action reference: action is not pinned to a hash (required by blanket policy)
|
|
zizmor-output
Found 5 findings for mandatory checks that must always succeed.
|
|
template-injection:
.github/workflows/run_tests_coordinator.yml#L89
run_tests_coordinator.yml:89: code injection via template expansion: may expand into attacker-controllable code
|
|
unpinned-images:
.github/workflows/run_tests_against_package.yml#L88
run_tests_against_package.yml:88: unpinned image references: container image is unpinned
|
|
unpinned-uses:
.github/workflows/run_tests_against_package.yml#L238
run_tests_against_package.yml:238: unpinned action reference: action is not pinned to a hash (required by blanket policy)
|
|
unpinned-uses:
.github/workflows/run_tests_against_package.yml#L231
run_tests_against_package.yml:231: unpinned action reference: action is not pinned to a hash (required by blanket policy)
|
|
unpinned-uses:
.github/workflows/run_tests_against_package.yml#L105
run_tests_against_package.yml:105: unpinned action reference: action is not pinned to a hash (required by blanket policy)
|
|
unpinned-uses:
.github/workflows/ci_pipeline.yml#L57
ci_pipeline.yml:57: unpinned action reference: action is not pinned to a hash (required by blanket policy)
|
|
zizmor-config
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: google-github-actions/auth@c200f3691d83b41bf9bbd8638997a462592937ed. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
zizmor-upload
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: google-github-actions/auth@c200f3691d83b41bf9bbd8638997a462592937ed. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
secrets-inherit:
.github/workflows/tpu_nightly_images_pipeline.yml#L103
tpu_nightly_images_pipeline.yml:103: secrets unconditionally inherited by called workflow: this reusable workflow
|
|
secrets-inherit:
.github/workflows/ci_pipeline.yml#L409
ci_pipeline.yml:409: secrets unconditionally inherited by called workflow: this reusable workflow
|
Artifacts
Produced during runtime
| Name | Size | Digest | |
|---|---|---|---|
|
zizmor
Expired
|
4 KB |
sha256:2a8b12552a811dc840882ed1fd8c40511dd41baf88fd5ef5836ff3c20fce3db5
|
|
|
zizmor-config
Expired
|
295 Bytes |
sha256:713932f08f9d814be2355bf08e8407127f6d8c926151f6493af3899ac9a32070
|
|