search

woodruffw / zizmor

A tool for finding security issues in GitHub Actions setups.
https://crates.io/crates/zizmor
MIT License
64 stars 2 forks source link

Output: evaluate `codespan` as an alternative to `annotate-snippets` #63

Open woodruffw opened 8 hours ago

woodruffw commented 8 hours ago

Right now we use annotate-snippets to provide the default diagnostic output. This works well, but it's a little bit inflexible. We should evaluate codespan-reporting as a potential alternative with a more flexible data model.