)]}'
{
  "commit": "f349be9bce0bc5e18be0a30cc0f5cde304d5d29d",
  "tree": "5d89bdbbca0f8b2f9a06415e424b317329a39fdf",
  "parents": [
    "32393ae1eefc568feed206d126434cd0c28893fd"
  ],
  "author": {
    "name": "Yannis Guyon",
    "email": "yguyon@google.com",
    "time": "Fri Jun 26 13:38:46 2026 +0200"
  },
  "committer": {
    "name": "GitHub",
    "email": "noreply@github.com",
    "time": "Fri Jun 26 13:38:46 2026 +0200"
  },
  "message": "Secure GitHub actions (#3279)\n\nAdd persist-credentials: false to every workflow file.\nSee https://docs.zizmor.sh/audits/#template-injection\n\nAvoid potential sources of code injection via template expansion in\nci-unix-static-av2.yml.\nSee https://docs.zizmor.sh/audits/#template-injection\n\nSimplify disabling mechanism in ci-unix-static-av2.yml.\nSee https://docs.zizmor.sh/audits/#obfuscation",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "5c794256fb087f2074ac3d490cd812d0d3496f43",
      "old_mode": 33188,
      "old_path": ".github/workflows/ci-android-emulator-tests.yml",
      "new_id": "c90da91ccc9e5acff5fdabb4b75a2c7985cfccf5",
      "new_mode": 33188,
      "new_path": ".github/workflows/ci-android-emulator-tests.yml"
    },
    {
      "type": "modify",
      "old_id": "cbf0d7a179f8aa99abf5fb17ed9677c0b4af879a",
      "old_mode": 33188,
      "old_path": ".github/workflows/ci-android-jni.yml",
      "new_id": "ee23f6b1ab427a30a684ecbb767ddba753c3e890",
      "new_mode": 33188,
      "new_path": ".github/workflows/ci-android-jni.yml"
    },
    {
      "type": "modify",
      "old_id": "0c1c9b3e342d9aecf903c6bf76a3a9e1b0fa5223",
      "old_mode": 33188,
      "old_path": ".github/workflows/ci-c-warnings.yml",
      "new_id": "a5a64b73c1ef1fe451ac77e3611c76ab13de8bb3",
      "new_mode": 33188,
      "new_path": ".github/workflows/ci-c-warnings.yml"
    },
    {
      "type": "modify",
      "old_id": "ab1a63623494e4f548952eca9bdf7ae4acf8f844",
      "old_mode": 33188,
      "old_path": ".github/workflows/ci-disable-gtest.yml",
      "new_id": "70a818003163a5493cd62a9f760651463f25913e",
      "new_mode": 33188,
      "new_path": ".github/workflows/ci-disable-gtest.yml"
    },
    {
      "type": "modify",
      "old_id": "2a0c77402210e35b856bf4656ff8a85092e80742",
      "old_mode": 33188,
      "old_path": ".github/workflows/ci-format-check.yml",
      "new_id": "3d442c14c725ac0b78a6fea4c55304af39ef556a",
      "new_mode": 33188,
      "new_path": ".github/workflows/ci-format-check.yml"
    },
    {
      "type": "modify",
      "old_id": "ffc1570c83652dcc788ec7a96ceb3a99f8d013c0",
      "old_mode": 33188,
      "old_path": ".github/workflows/ci-fuzztest.yml",
      "new_id": "ecd8e37fe046659bc688dc1cca6d87042e7cd579",
      "new_mode": 33188,
      "new_path": ".github/workflows/ci-fuzztest.yml"
    },
    {
      "type": "modify",
      "old_id": "d9037b970ef64e2c7892f4339f2dc53da9c6d571",
      "old_mode": 33188,
      "old_path": ".github/workflows/ci-linux-artifacts.yml",
      "new_id": "b52cd3f89d693cf7c933abc839401516c6d59703",
      "new_mode": 33188,
      "new_path": ".github/workflows/ci-linux-artifacts.yml"
    },
    {
      "type": "modify",
      "old_id": "2b55e4358837080d2d33f2a214084924b6e05023",
      "old_mode": 33188,
      "old_path": ".github/workflows/ci-linux-coverage.yml",
      "new_id": "750cd4ebeb8a4ec8c50e6dc6342672937fff998a",
      "new_mode": 33188,
      "new_path": ".github/workflows/ci-linux-coverage.yml"
    },
    {
      "type": "modify",
      "old_id": "9328d0aef2a1bdb52b25f0c6d366caf902dcb985",
      "old_mode": 33188,
      "old_path": ".github/workflows/ci-linux-golden-tests.yml",
      "new_id": "cef80dbf785c9b843ab41b0a167275e1035b63a6",
      "new_mode": 33188,
      "new_path": ".github/workflows/ci-linux-golden-tests.yml"
    },
    {
      "type": "modify",
      "old_id": "b54d0cade5b94394cefc9434d7eb674e67fdf656",
      "old_mode": 33188,
      "old_path": ".github/workflows/ci-linux-oldest-cmake.yml",
      "new_id": "70511ee04513f1eb605abea302fa356a74280523",
      "new_mode": 33188,
      "new_path": ".github/workflows/ci-linux-oldest-cmake.yml"
    },
    {
      "type": "modify",
      "old_id": "ca74eb1bbd9149ac1d46c04a44707504ab63a072",
      "old_mode": 33188,
      "old_path": ".github/workflows/ci-macos-artifacts.yml",
      "new_id": "91cf05c76ec7f5ba4d36bb0b861286d240d16102",
      "new_mode": 33188,
      "new_path": ".github/workflows/ci-macos-artifacts.yml"
    },
    {
      "type": "modify",
      "old_id": "603ec47c3ecf33395497ad57c02fbcf10ddd5945",
      "old_mode": 33188,
      "old_path": ".github/workflows/ci-mingw.yml",
      "new_id": "b2093a594fe7b2ebfacbcf5a465669d8a6a5bcb8",
      "new_mode": 33188,
      "new_path": ".github/workflows/ci-mingw.yml"
    },
    {
      "type": "modify",
      "old_id": "d5e04d0aed00637a013164cbfc531463cd277100",
      "old_mode": 33188,
      "old_path": ".github/workflows/ci-unix-shared-installed.yml",
      "new_id": "53a07c66095e0b5365a83b812309cebd4c0edbde",
      "new_mode": 33188,
      "new_path": ".github/workflows/ci-unix-shared-installed.yml"
    },
    {
      "type": "modify",
      "old_id": "7361440ee283c99e691e897a4bd3f69115bed5c9",
      "old_mode": 33188,
      "old_path": ".github/workflows/ci-unix-shared-local.yml",
      "new_id": "9227cb55020efa2c4a7fa32e041690229850caa3",
      "new_mode": 33188,
      "new_path": ".github/workflows/ci-unix-shared-local.yml"
    },
    {
      "type": "modify",
      "old_id": "bdd29218e7aeb155002353a9cbb3bd04ea990a48",
      "old_mode": 33188,
      "old_path": ".github/workflows/ci-unix-static-av2.yml",
      "new_id": "268156975f154aa02a32469227b5ca8c71647dd1",
      "new_mode": 33188,
      "new_path": ".github/workflows/ci-unix-static-av2.yml"
    },
    {
      "type": "modify",
      "old_id": "7433bbdcf7cd0ec78c0829b527d4e313fe356dcc",
      "old_mode": 33188,
      "old_path": ".github/workflows/ci-unix-static-sanitized-memory.yml",
      "new_id": "12813469fc2f1c98cf6f2a6c7ab1130d93c79310",
      "new_mode": 33188,
      "new_path": ".github/workflows/ci-unix-static-sanitized-memory.yml"
    },
    {
      "type": "modify",
      "old_id": "f38ec957fc1c4f0cb9757e2fcbb33e032216d4eb",
      "old_mode": 33188,
      "old_path": ".github/workflows/ci-unix-static-sanitized.yml",
      "new_id": "c6088556faac8bbfc8d383d61e570d701c8586cc",
      "new_mode": 33188,
      "new_path": ".github/workflows/ci-unix-static-sanitized.yml"
    },
    {
      "type": "modify",
      "old_id": "0722b92d8cb004bd7b2d73e9a1b4bad25a570380",
      "old_mode": 33188,
      "old_path": ".github/workflows/ci-unix-static.yml",
      "new_id": "d3fb415875d5eea901221e2ce6832ad9d3b2d64e",
      "new_mode": 33188,
      "new_path": ".github/workflows/ci-unix-static.yml"
    },
    {
      "type": "modify",
      "old_id": "b99f6ffc8c5875b63a400efcac0c8884ebb769c0",
      "old_mode": 33188,
      "old_path": ".github/workflows/ci-windows-artifacts.yml",
      "new_id": "15b98e82bf9168c3edfbc1c6633fe3fb0da3e78a",
      "new_mode": 33188,
      "new_path": ".github/workflows/ci-windows-artifacts.yml"
    },
    {
      "type": "modify",
      "old_id": "d4ecb953459314b31dbee72d2a9395ef880f8312",
      "old_mode": 33188,
      "old_path": ".github/workflows/ci-windows-installed.yml",
      "new_id": "ee4a2b8c7cc160c1481717689e61d9e3b43d774e",
      "new_mode": 33188,
      "new_path": ".github/workflows/ci-windows-installed.yml"
    },
    {
      "type": "modify",
      "old_id": "a6f15b79d6eb52944261d6ed31f1f3a5c392133e",
      "old_mode": 33188,
      "old_path": ".github/workflows/ci-windows-shared-local.yml",
      "new_id": "4b9a66e61e7d760f605471f2b48256e114bf5141",
      "new_mode": 33188,
      "new_path": ".github/workflows/ci-windows-shared-local.yml"
    },
    {
      "type": "modify",
      "old_id": "1647a10bdf02d3d460f7b2a3e7edaff938ce8968",
      "old_mode": 33188,
      "old_path": ".github/workflows/ci-windows.yml",
      "new_id": "337b7d93f07924b59bdbd73a87b51d2b13802675",
      "new_mode": 33188,
      "new_path": ".github/workflows/ci-windows.yml"
    }
  ]
}