diff options
| author | Egor Tensin <egor@tensin.name> | 2026-10-20 23:48:18 +0300 |
|---|---|---|
| committer | Egor Tensin <egor@tensin.name> | 2026-10-21 00:03:28 +0300 |
| commit | 01c5f4bf7514a2b46eb7c749a1b0e51081d4457f (patch) | |
| tree | e02f580dc088b0fa2c8f8af943d115a4c53c27f3 /.github | |
| parent | fix zizmor warnings (diff) | |
| download | cgitize-01c5f4bf7514a2b46eb7c749a1b0e51081d4457f.tar.gz cgitize-01c5f4bf7514a2b46eb7c749a1b0e51081d4457f.zip | |
workflows/ci: run zizmor on linting
Diffstat (limited to '.github')
| -rw-r--r-- | .github/workflows/ci.yml | 4 | ||||
| -rw-r--r-- | .github/zizmor.yml | 5 |
2 files changed, 9 insertions, 0 deletions
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 34f6dbe..1925515 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -13,6 +13,8 @@ jobs: runs-on: ubuntu-latest name: Linting continue-on-error: "${{ github.ref != 'refs/heads/master' }}" + permissions: + security-events: write steps: - name: Checkout uses: actions/checkout@v7 @@ -24,6 +26,8 @@ jobs: python-version: '3.x' - name: Run black uses: psf/black@stable + - name: Run zizmor + uses: zizmorcore/zizmor-action@v0.7.1 test_local: runs-on: ubuntu-latest diff --git a/.github/zizmor.yml b/.github/zizmor.yml new file mode 100644 index 0000000..2ef0d8f --- /dev/null +++ b/.github/zizmor.yml @@ -0,0 +1,5 @@ +rules: + unpinned-uses: + config: + policies: + '*': ref-pin |