Skip to content

ci: audit github workflows with zizmor - #1961

Merged
joshka merged 4 commits into
mainfrom
jm/zizmor
Jul 2, 2025
Merged

ci: audit github workflows with zizmor#1961
joshka merged 4 commits into
mainfrom
jm/zizmor

Conversation

@joshka

@joshka joshka commented Jun 30, 2025

Copy link
Copy Markdown
Member

Fixes #1950

@joshka
joshka requested a review from a team as a code owner June 30, 2025 23:30
Comment thread .github/workflows/check-pr.yml
Comment thread .github/workflows/check-pr.yml
Comment thread .github/workflows/release-alpha.yml
Comment thread .github/workflows/release-stable.yml
@joshka joshka changed the title fix: audit github workflows with zizmor ci: audit github workflows with zizmor Jul 1, 2025
@joshka

joshka commented Jul 1, 2025

Copy link
Copy Markdown
Member Author

(added the zizmor workflow)

@github-advanced-security

Copy link
Copy Markdown

This pull request sets up GitHub code scanning for this repository. Once the scans have completed and the checks have passed, the analysis results for this pull request branch will appear on this overview. Once you merge this pull request, the 'Security' tab will show more code scanning analysis results (for example, for the default branch). Depending on your configuration and choice of analysis tool, future pull requests will be annotated with code scanning analysis results. For more information about GitHub code scanning, check out the documentation.

Comment thread .github/workflows/ci.yml Fixed
Comment thread .github/workflows/ci.yml Fixed
Comment thread .github/workflows/ci.yml Fixed
We use several github actions that install tooling (dtolnay's
rust-toolchain and install, and taiki-e's install-action)

When a new release of the toold occurs, the shortcut branches foe
the tool installs are rewritten
rather than updated / merged from master,
so instead of pointing at that branch we point at the linear branch and
pass the toolname / toolchain to use via workflow parameters.
Comment thread bacon.toml Outdated
Co-authored-by: Jagoda Estera Ślązak <128227338+j-g00da@users.noreply.github.com>
@joshka
joshka merged commit 1f0c2ee into main Jul 2, 2025
35 checks passed
@joshka
joshka deleted the jm/zizmor branch July 2, 2025 21:51
@orhun orhun mentioned this pull request Oct 31, 2025
takumi-earth pushed a commit to earthlings-dev/ratatui that referenced this pull request Jan 27, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Lint CI workflows

4 participants