chore(deps): bump zizmorcore/zizmor-action from 0.5.0 to 0.5.2 in /.github/workflows by dependabot[bot] · Pull Request #546 · anchore/stereoscope

dependabot · 2026-03-16T20:48:57Z

Bumps zizmorcore/zizmor-action from 0.5.0 to 0.5.2.

Release notes

Sourced from zizmorcore/zizmor-action's releases.

v0.5.2

What's Changed

zizmor 1.23.1 is now the default used by this action.

Full Changelog: zizmorcore/zizmor-action@v0.5.1...v0.5.2

v0.5.1

What's Changed

zizmor 1.23.0 is now the default used by this action.

Full Changelog: zizmorcore/zizmor-action@v0.5.0...v0.5.1

Commits

71321a2 Sync zizmor versions (#96)
5ed31db Bump pins (#95)
195d10a Sync zizmor versions (#94)
c65bc88 chore(deps): bump github/codeql-action in the github-actions group (#93)
c2c887f chore(deps): bump zizmorcore/zizmor-action in the github-actions group (#91)
5507ab0 Bump pins in README (#90)
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [zizmorcore/zizmor-action](https://github.com/zizmorcore/zizmor-action) from 0.5.0 to 0.5.2. - [Release notes](https://github.com/zizmorcore/zizmor-action/releases) - [Commits](zizmorcore/zizmor-action@0dce257...71321a2) --- updated-dependencies: - dependency-name: zizmorcore/zizmor-action dependency-version: 0.5.2 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>

github-actions · 2026-03-16T20:51:39Z

Benchmark Test Results

Benchmark results from the latest changes vs base branch

make .tool/task
make[1]: Entering directory '/home/runner/work/stereoscope/stereoscope'
make[1]: Leaving directory '/home/runner/work/stereoscope/stereoscope'
.tool/task show-benchstat
?   	github.com/anchore/stereoscope	[no test files]
?   	github.com/anchore/stereoscope/examples	[no test files]
PASS
ok  	github.com/anchore/stereoscope/internal	0.003s
?   	github.com/anchore/stereoscope/internal/bus	[no test files]
PASS
ok  	github.com/anchore/stereoscope/internal/containerd	0.007s
PASS
ok  	github.com/anchore/stereoscope/internal/docker	0.004s
?   	github.com/anchore/stereoscope/internal/log	[no test files]
PASS
ok  	github.com/anchore/stereoscope/internal/podman	0.005s
?   	github.com/anchore/stereoscope/internal/testutil	[no test files]
?   	github.com/anchore/stereoscope/pkg/event	[no test files]
?   	github.com/anchore/stereoscope/pkg/event/parsers	[no test files]
goos: linux
goarch: amd64
pkg: github.com/anchore/stereoscope/pkg/file
cpu: AMD EPYC 7763 64-Core Processor                
BenchmarkTarIndex-4   	   27204	     44557 ns/op	    5700 B/op	      93 allocs/op
BenchmarkTarIndex-4   	   26922	     44718 ns/op	    5700 B/op	      93 allocs/op
BenchmarkTarIndex-4   	   27003	     44447 ns/op	    5700 B/op	      93 allocs/op
BenchmarkTarIndex-4   	   26859	     44284 ns/op	    5701 B/op	      93 allocs/op
BenchmarkTarIndex-4   	   27067	     44223 ns/op	    5702 B/op	      93 allocs/op
BenchmarkTarIndex-4   	   26973	     44352 ns/op	    5700 B/op	      93 allocs/op
BenchmarkTarIndex-4   	   27088	     44188 ns/op	    5701 B/op	      93 allocs/op
PASS
ok  	github.com/anchore/stereoscope/pkg/file	11.556s
PASS
ok  	github.com/anchore/stereoscope/pkg/filetree	0.005s
?   	github.com/anchore/stereoscope/pkg/filetree/filenode	[no test files]
PASS
ok  	github.com/anchore/stereoscope/pkg/image	0.005s
PASS
ok  	github.com/anchore/stereoscope/pkg/image/containerd	0.007s
PASS
ok  	github.com/anchore/stereoscope/pkg/image/docker	0.005s
PASS
ok  	github.com/anchore/stereoscope/pkg/image/oci	0.005s
PASS
ok  	github.com/anchore/stereoscope/pkg/image/oci/credhelpers	0.006s
?   	github.com/anchore/stereoscope/pkg/image/podman	[no test files]
PASS
ok  	github.com/anchore/stereoscope/pkg/image/sif	0.004s
?   	github.com/anchore/stereoscope/pkg/imagetest	[no test files]
PASS
ok  	github.com/anchore/stereoscope/pkg/tree	0.004s
PASS
ok  	github.com/anchore/stereoscope/pkg/tree/node	0.003s
goos: linux
goarch: amd64
pkg: github.com/anchore/stereoscope/test/integration
cpu: AMD EPYC 7763 64-Core Processor                
BenchmarkSimpleImage_GetImage/docker-archive-4 	    1056	   1135018 ns/op	  270303 B/op	    2184 allocs/op
BenchmarkSimpleImage_GetImage/docker-archive-4 	    1030	   1175843 ns/op	  270263 B/op	    2184 allocs/op
BenchmarkSimpleImage_GetImage/docker-archive-4 	    1039	   1148266 ns/op	  270330 B/op	    2184 allocs/op
BenchmarkSimpleImage_GetImage/docker-archive-4 	    1028	   1142988 ns/op	  270135 B/op	    2184 allocs/op
BenchmarkSimpleImage_GetImage/docker-archive-4 	    1050	   1137026 ns/op	  269956 B/op	    2183 allocs/op
BenchmarkSimpleImage_GetImage/docker-archive-4 	    1042	   1146726 ns/op	  269923 B/op	    2183 allocs/op
BenchmarkSimpleImage_GetImage/docker-archive-4 	    1045	   1131310 ns/op	  269955 B/op	    2183 allocs/op
--- FAIL: BenchmarkSimpleImage_GetImage/podman
    fixture_image_simple_test.go:175: could not get fixture image: unable to detect input for 'stereoscope-fixture-image-simple:04e16e44161c8888a1a963720fd0443cbf7eef8101434c431de8725cd98cc9f7', errs: podman not available: no host address
#0 building with "default" instance using docker driver

#1 [internal] load build definition from Dockerfile
#1 transferring dockerfile: 345B done
#1 DONE 0.0s

#2 [internal] load .dockerignore
#2 transferring context: 2B done
#2 DONE 0.0s

#3 [internal] load build context
#3 transferring context: 209B done
#3 DONE 0.0s

#4 [1/3] ADD file-1.txt /somefile-1.txt
#4 CACHED

#5 [2/3] ADD file-2.txt /somefile-2.txt
#5 CACHED

#6 [3/3] ADD target /
#6 CACHED

#7 exporting to image
#7 exporting layers done
#7 writing image sha256:17ac4a3527f50ab0bdada30899529230ca47e5b41014a77f1c3c0226a9049e82 done
#7 naming to docker.io/library/stereoscope-fixture-image-simple:04e16e44161c8888a1a963720fd0443cbf7eef8101434c431de8725cd98cc9f7 done
#7 naming to docker.io/library/stereoscope-fixture-image-simple:latest done
#7 DONE 0.0s
time="2026-03-16T20:51:27Z" level=warning msg="Failed to check deprecations" error="connection error: desc = \"transport: Error while dialing: dial unix /run/containerd/containerd.sock: connect: permission denied\""
ctr: connection error: desc = "transport: Error while dialing: dial unix /run/containerd/containerd.sock: connect: permission denied"
--- FAIL: BenchmarkSimpleImage_GetImage
    image_fixtures.go:195: using existing image tar: 'testdata/cache/stereoscope-fixture-image-simple-04e16e44161c8888a1a963720fd0443cbf7eef8101434c431de8725cd98cc9f7.tar' (size: 22528, modified: 2026-03-16 20:50:39.045541072 +0000 UTC, mode: -rw-r--r--)
    image_fixtures.go:243: Build docker image: name="stereoscope-fixture-image-simple" tag="04e16e44161c8888a1a963720fd0443cbf7eef8101434c431de8725cd98cc9f7"
    image_fixtures.go:293: saveImage running: docker image save stereoscope-fixture-image-simple:04e16e44161c8888a1a963720fd0443cbf7eef8101434c431de8725cd98cc9f7
    image_fixtures.go:288: 
        	Error Trace:	/home/runner/work/stereoscope/stereoscope/pkg/imagetest/image_fixtures.go:288
        	            				/home/runner/work/stereoscope/stereoscope/pkg/imagetest/image_fixtures.go:164
        	            				/home/runner/work/stereoscope/stereoscope/pkg/imagetest/image_fixtures.go:154
        	            				/home/runner/work/stereoscope/stereoscope/pkg/imagetest/image_fixtures.go:35
        	            				/home/runner/work/stereoscope/stereoscope/test/integration/fixture_image_simple_test.go:163
        	            				/opt/hostedtoolcache/go/1.25.8/x64/src/testing/benchmark.go:245
        	            				/opt/hostedtoolcache/go/1.25.8/x64/src/runtime/asm_amd64.s:1693
        	Error:      	Received unexpected error:
        	            	exit status 1
        	Test:       	BenchmarkSimpleImage_GetImage
        	Messages:   	could not import docker image to containerd (shell out)
BenchmarkSimpleImage_FetchSquashedContents/docker-archive-4         	   45854	     26694 ns/op	    2616 B/op	      18 allocs/op
BenchmarkSimpleImage_FetchSquashedContents/docker-archive-4         	   46306	     25980 ns/op	    2616 B/op	      18 allocs/op
BenchmarkSimpleImage_FetchSquashedContents/docker-archive-4         	   45855	     26313 ns/op	    2616 B/op	      18 allocs/op
BenchmarkSimpleImage_FetchSquashedContents/docker-archive-4         	   45819	     26048 ns/op	    2616 B/op	      18 allocs/op
BenchmarkSimpleImage_FetchSquashedContents/docker-archive-4         	   45541	     26036 ns/op	    2616 B/op	      18 allocs/op
BenchmarkSimpleImage_FetchSquashedContents/docker-archive-4         	   45673	     26071 ns/op	    2616 B/op	      18 allocs/op
BenchmarkSimpleImage_FetchSquashedContents/docker-archive-4         	   45874	     26095 ns/op	    2616 B/op	      18 allocs/op
--- FAIL: BenchmarkSimpleImage_FetchSquashedContents
    image_fixtures.go:195: using existing image tar: 'testdata/cache/stereoscope-fixture-image-simple-04e16e44161c8888a1a963720fd0443cbf7eef8101434c431de8725cd98cc9f7.tar' (size: 22528, modified: 2026-03-16 20:50:39.045541072 +0000 UTC, mode: -rw-r--r--)
    image_fixtures.go:77: error getting fixture image: 'podman' 'image-simple' with request 'podman:stereoscope-fixture-image-simple:04e16e44161c8888a1a963720fd0443cbf7eef8101434c431de8725cd98cc9f7': unable to detect input for 'stereoscope-fixture-image-simple:04e16e44161c8888a1a963720fd0443cbf7eef8101434c431de8725cd98cc9f7', errs: podman not available: no host address
FAIL
exit status 1
FAIL	github.com/anchore/stereoscope/test/integration	20.256s
FAIL
goos: linux
goarch: amd64
pkg: github.com/anchore/stereoscope/pkg/file
cpu: AMD EPYC 7763 64-Core Processor                
ctr: 
           │ .tmp/benchmark-76e65d6.txt │
           │           sec/op           │
TarIndex-4                  44.35µ ± 1%

           │ .tmp/benchmark-76e65d6.txt │
           │            B/op            │
TarIndex-4                 5.566Ki ± 0%

           │ .tmp/benchmark-76e65d6.txt │
           │         allocs/op          │
TarIndex-4                   93.00 ± 0%

pkg: github.com/anchore/stereoscope/test/integration
                                      │ .tmp/benchmark-76e65d6.txt │
                                      │           sec/op           │
SimpleImage_GetImage/docker-archive-4                  1.143m ± 3%

                                      │ .tmp/benchmark-76e65d6.txt │
                                      │            B/op            │
SimpleImage_GetImage/docker-archive-4                 263.8Ki ± 0%

                                      │ .tmp/benchmark-76e65d6.txt │
                                      │         allocs/op          │
SimpleImage_GetImage/docker-archive-4                  2.184k ± 0%

ctr: connection error: desc = "transport: Error while dialing: dial unix /run/containerd/containerd.sock: connect: permission denied"
                                                   │ .tmp/benchmark-76e65d6.txt │
                                                   │           sec/op           │
SimpleImage_FetchSquashedContents/docker-archive-4                  26.07µ ± 2%

                                                   │ .tmp/benchmark-76e65d6.txt │
                                                   │            B/op            │
SimpleImage_FetchSquashedContents/docker-archive-4                 2.555Ki ± 0%

                                                   │ .tmp/benchmark-76e65d6.txt │
                                                   │         allocs/op          │
SimpleImage_FetchSquashedContents/docker-archive-4                   18.00 ± 0%
goos: linux
goarch: amd64
pkg: github.com/anchore/stereoscope/pkg/file
cpu: AMD EPYC 7763 64-Core Processor                
ctr: 
           │ .tmp/benchmark-76e65d6.txt │
           │           sec/op           │
TarIndex-4                  44.35µ ± 1%

           │ .tmp/benchmark-76e65d6.txt │
           │            B/op            │
TarIndex-4                 5.566Ki ± 0%

           │ .tmp/benchmark-76e65d6.txt │
           │         allocs/op          │
TarIndex-4                   93.00 ± 0%

pkg: github.com/anchore/stereoscope/test/integration
                                      │ .tmp/benchmark-76e65d6.txt │
                                      │           sec/op           │
SimpleImage_GetImage/docker-archive-4                  1.143m ± 3%

                                      │ .tmp/benchmark-76e65d6.txt │
                                      │            B/op            │
SimpleImage_GetImage/docker-archive-4                 263.8Ki ± 0%

                                      │ .tmp/benchmark-76e65d6.txt │
                                      │         allocs/op          │
SimpleImage_GetImage/docker-archive-4                  2.184k ± 0%

ctr: connection error: desc = "transport: Error while dialing: dial unix /run/containerd/containerd.sock: connect: permission denied"
                                                   │ .tmp/benchmark-76e65d6.txt │
                                                   │           sec/op           │
SimpleImage_FetchSquashedContents/docker-archive-4                  26.07µ ± 2%

                                                   │ .tmp/benchmark-76e65d6.txt │
                                                   │            B/op            │
SimpleImage_FetchSquashedContents/docker-archive-4                 2.555Ki ± 0%

                                                   │ .tmp/benchmark-76e65d6.txt │
                                                   │         allocs/op          │
SimpleImage_FetchSquashedContents/docker-archive-4                   18.00 ± 0%

dependabot bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Mar 16, 2026

github-actions bot approved these changes Mar 16, 2026

View reviewed changes

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps): bump zizmorcore/zizmor-action from 0.5.0 to 0.5.2 in /.github/workflows#546

chore(deps): bump zizmorcore/zizmor-action from 0.5.0 to 0.5.2 in /.github/workflows#546
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/github_actions/dot-github/workflows/zizmorcore/zizmor-action-0.5.2

dependabot bot commented on behalf of github Mar 16, 2026

Uh oh!

github-actions bot commented Mar 16, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot bot commented on behalf of github Mar 16, 2026

v0.5.2

What's Changed

v0.5.1

What's Changed

Uh oh!

github-actions bot commented Mar 16, 2026

Benchmark Test Results

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants