From 35a73627a28a21d0b5414c247eef9eb88822de20 Mon Sep 17 00:00:00 2001
From: marius-kilocode <marius@kilocode.ai>
Date: Tue, 23 Jun 2026 19:06:12 +0200
Subject: [PATCH] fix(ci): use allowed Zig setup

---
 .github/workflows/publish.yml | 12 +++++++-----
 .github/workflows/test.yml    | 13 +++++++------
 2 files changed, 14 insertions(+), 11 deletions(-)

diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index 866cf143b8..ae13d11948 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -86,12 +86,14 @@ jobs:
 
       # kilocode_change start
       - name: Setup Zig for Linux sandbox helpers
-        uses: mlugg/setup-zig@d1434d08867e3ee9daa34448df10607b98908d29 # v2.2.1
-        with:
-          version: 0.14.0
-          use-cache: false
+        run: |
+          curl --fail --location --retry 3 \
+            https://ziglang.org/download/0.14.0/zig-linux-x86_64-0.14.0.tar.xz \
+            --output "$RUNNER_TEMP/zig.tar.xz"
+          echo "473ec26806133cf4d1918caf1a410f8403a13d979726a9045b421b685031a982  $RUNNER_TEMP/zig.tar.xz" | sha256sum --check --status
+          tar -xJf "$RUNNER_TEMP/zig.tar.xz" -C "$RUNNER_TEMP"
+          echo "$RUNNER_TEMP/zig-linux-x86_64-0.14.0" >> "$GITHUB_PATH"
       # kilocode_change end
-
       - name: Build
         id: build
         run: |
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index 134002c3c6..e9392e3c78 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -66,10 +66,13 @@ jobs:
       # kilocode_change start
       - name: Setup Zig for Linux sandbox helper
         if: runner.os == 'Linux'
-        uses: mlugg/setup-zig@d1434d08867e3ee9daa34448df10607b98908d29 # v2.2.1
-        with:
-          version: 0.14.0
-          use-cache: false
+        run: |
+          curl --fail --location --retry 3 \
+            https://ziglang.org/download/0.14.0/zig-linux-x86_64-0.14.0.tar.xz \
+            --output "$RUNNER_TEMP/zig.tar.xz"
+          echo "473ec26806133cf4d1918caf1a410f8403a13d979726a9045b421b685031a982  $RUNNER_TEMP/zig.tar.xz" | sha256sum --check --status
+          tar -xJf "$RUNNER_TEMP/zig.tar.xz" -C "$RUNNER_TEMP"
+          echo "$RUNNER_TEMP/zig-linux-x86_64-0.14.0" >> "$GITHUB_PATH"
 
       - name: Build Linux sandbox helper
         if: runner.os == 'Linux'
@@ -77,7 +80,6 @@ jobs:
           bun packages/opencode/script/kilocode/bubblewrap.ts --arch x64 --output "$RUNNER_TEMP/bwrap"
           echo "KILO_BWRAP_PATH=$RUNNER_TEMP/bwrap" >> "$GITHUB_ENV"
       # kilocode_change end
-
       - name: Configure git identity
         run: |
           git config --global user.email "kilo-maintainer[bot]@users.noreply.github.com"
@@ -105,7 +107,6 @@ jobs:
           sudo env PATH="$PATH" KILO_BWRAP_PATH="$KILO_BWRAP_PATH" KILO_TEST_PRIVILEGED_MOUNTS=1 \
             "$(command -v bun)" test packages/core/test/kilocode/linux-sandbox.test.ts -t "nested mount"
       # kilocode_change end
-
       - name: Run HttpApi exerciser gates
         if: runner.os == 'Linux' # kilocode_change
         working-directory: packages/opencode