summaryrefslogtreecommitdiff
path: root/.github
diff options
context:
space:
mode:
authorJacob Walls <jacobtylerwalls@gmail.com>2025-11-14 13:58:40 -0500
committerJacob Walls <jacobtylerwalls@gmail.com>2025-11-21 14:37:33 -0500
commit3a493d45454e90e566cf5cc64d32e4c054f83056 (patch)
tree9007e04d017cd843c020041d2217c42101f00236 /.github
parentbc33e240e1f197dc0c29c30866066138412228e1 (diff)
[6.0.x] Addressed unpinned-uses zizmor finding.
Backport of 86b8058b40145fb5ba4fd859676225f533eca986 from main.
Diffstat (limited to '.github')
-rw-r--r--.github/workflows/benchmark.yml3
-rw-r--r--.github/workflows/check_commit_messages.yml3
2 files changed, 5 insertions, 1 deletions
diff --git a/.github/workflows/benchmark.yml b/.github/workflows/benchmark.yml
index 1e56313807..c803546c78 100644
--- a/.github/workflows/benchmark.yml
+++ b/.github/workflows/benchmark.yml
@@ -19,7 +19,8 @@ jobs:
path: "."
persist-credentials: false
- name: Setup Miniforge
- uses: conda-incubator/setup-miniconda@v3
+ # Pinned to v3.2.0.
+ uses: conda-incubator/setup-miniconda@835234971496cad1653abb28a638a281cf32541f
with:
miniforge-version: "24.1.2-0"
activate-environment: asv-bench
diff --git a/.github/workflows/check_commit_messages.yml b/.github/workflows/check_commit_messages.yml
index dc841fef3f..ece0bcac4e 100644
--- a/.github/workflows/check_commit_messages.yml
+++ b/.github/workflows/check_commit_messages.yml
@@ -8,6 +8,9 @@ concurrency:
group: ${{ github.workflow }}-${{ github.ref }}
cancel-in-progress: true
+permissions:
+ contents: read
+
jobs:
check-commit-prefix:
if: startsWith(github.event.pull_request.base.ref, 'stable/')