GHA/checksrc: pass zizmor a GH token, fix warnings found

For a complete, online, check.

After this patch the check takes 30s, up from a fraction of a second.

Also bump CodeQL actions to their latest version.

Closes #18827
This commit is contained in:
Viktor Szakats 2025-10-03 11:43:10 +02:00
parent 4e2edde102
commit 2e5993ab08
No known key found for this signature in database
GPG key ID: B5ABD165E2AEF201
3 changed files with 7 additions and 5 deletions

View file

@ -49,7 +49,7 @@ jobs:
- name: 'maketgz'
run: SOURCE_DATE_EPOCH=1711526400 ./scripts/maketgz 99.98.97
- uses: actions/upload-artifact@4cec3d8aa04e39d1a68397de0c4cd6fb9dce8ec1 # v4
- uses: actions/upload-artifact@4cec3d8aa04e39d1a68397de0c4cd6fb9dce8ec1 # v4.6.1
with:
name: 'release-tgz'
path: 'curl-99.98.97.tar.gz'