Skip to content

ci: pin workflows#1433

Merged
hynek merged 4 commits into
mainfrom
fix-zizmor
May 29, 2025
Merged

ci: pin workflows#1433
hynek merged 4 commits into
mainfrom
fix-zizmor

Conversation

@hynek

@hynek hynek commented May 29, 2025

Copy link
Copy Markdown
Member

No description provided.

@Tinche

Tinche commented May 29, 2025

Copy link
Copy Markdown
Member

I'd just pin everything except github and remove the config file 😇

@Tinche will keep them updated :P
@hynek hynek changed the title ci: pin non-gh, non-hynek, non-pypa uses ci: pin workflows May 29, 2025
@hynek hynek requested a review from Tinche May 29, 2025 11:53

@Tinche Tinche left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Damn, you chose violence pinned everything huh?

@webknjaz webknjaz May 29, 2025

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

In case you ever want to experiment with this, keep an eye on the new repo I got:

  lint-github-actions:
    name: 🌈 Lint GitHub Actions with zizmor
    permissions:
      security-events: write
    # yamllint disable-line rule:line-length
    uses: zizmorcore/workflow/.github/workflows/reusable-zizmor.yml@3bb5e95068d0f44b6d2f3f7e91379bed1d2f96a8

@hynek

hynek commented May 29, 2025

Copy link
Copy Markdown
Member Author

I'd just pin everything except github and remove the config file 😇

I'd have to add a Pinact config files otherwise. :D

@hynek hynek added this pull request to the merge queue May 29, 2025
Merged via the queue into main with commit 889ea73 May 29, 2025
19 checks passed
@hynek hynek deleted the fix-zizmor branch May 29, 2025 12:58
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants