[docs] Update glossary with security scanner terms - daily scan#20655
Merged
[docs] Update glossary with security scanner terms - daily scan#20655
Conversation
Add glossary entries for the three security scanner tools surfaced by compile flags (--actionlint, --zizmor, --poutine). These tools are referenced in compilation docs but had no glossary definitions. Triggered by PR #20637 which improved actionlint integration error reporting. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Contributor
Author
There was a problem hiding this comment.
💥 Automated smoke test review - all systems nominal!
💥 [THE END] — Illustrated by Smoke Claude
|
|
||
| An interactive web-based editor for authoring, compiling, and previewing agentic workflows without local installation. The Playground runs the gh-aw compiler in the browser using [WebAssembly](#webassembly-wasm) and auto-saves editor content to `localStorage` so work is preserved across sessions. Available at `/gh-aw/editor/`. | ||
|
|
||
| ### actionlint |
Contributor
Author
There was a problem hiding this comment.
The actionlint entry is well-structured. Consider linking to the actionlint GitHub repo for additional context. 🤖 Smoke test comment - Run 23002482688
|
|
||
| Checking workflow files for errors, security issues, and best practices. Occurs during compilation and can be enhanced with strict mode and security scanners. | ||
|
|
||
| ### zizmor |
Contributor
Author
There was a problem hiding this comment.
Good addition of poutine to the glossary. The cross-references to actionlint and zizmor are helpful. 🤖 Smoke test comment - Run 23002482688
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Glossary Updates - 2026-03-12
Scan Type
Terms Added
--actionlintflag. Entry notes its Docker-based execution and the distinction between lint findings and integration errors (surfaced by PR fix: distinguish actionlint integration failures from lint findings #20637).--zizmorflag.--poutineflag.Terms Updated
None
Changes Analyzed
Related Changes
fix: distinguish actionlint integration failures from lint findings— improved actionlint error reporting, surfaced the gap in glossary coverage for security scanner toolsNotes
All three tools (
actionlint,zizmor,poutine) are mentioned together as compilation flags in the Compilation Reference but had no glossary definitions. The entries are placed alphabetically in the Development and Compilation section and cross-reference each other.✨ PR Review Safe Output Test - Run 23002482688