ci: add zizmor workflow - #1

Closed

Sheraff wants to merge 1 commit into

mainfrom

Sheraff commented May 12, 2026

Owner

Summary

add a zizmor GitHub Actions workflow that fails on findings
tighten checkout credential persistence and workflow permissions
fix existing zizmor findings in workflows and local actions

Validation

GH_TOKEN=*** /tmp/opencode/zizmor-v1.24.1/zizmor --persona=regular --format=github --color=never -- .
git diff --check
yq '.' .github/workflows/.yml .github//action.yml > /dev/null


          ci: add zizmor workflow audit

1597e27

Sheraff commented May 12, 2026

Owner Author

Closing this fork-local PR; the intended target is TanStack/config.

Sheraff closed this

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet