diff options
| author | Jacob Walls <jacobtylerwalls@gmail.com> | 2025-11-14 13:58:40 -0500 |
|---|---|---|
| committer | Jacob Walls <jacobtylerwalls@gmail.com> | 2025-11-21 14:36:28 -0500 |
| commit | 86b8058b40145fb5ba4fd859676225f533eca986 (patch) | |
| tree | c9d4dd7cb0cb4ea8c1d56ffb9f8b9ebdf0963ac7 | |
| parent | 08f4901b3fd3f352ef9cea830d000aee73152556 (diff) | |
Addressed unpinned-uses zizmor finding.
| -rw-r--r-- | .github/workflows/benchmark.yml | 3 | ||||
| -rw-r--r-- | .github/workflows/check_commit_messages.yml | 3 | ||||
| -rw-r--r-- | zizmor.yml | 6 |
3 files changed, 11 insertions, 1 deletions
diff --git a/.github/workflows/benchmark.yml b/.github/workflows/benchmark.yml index 1e56313807..c803546c78 100644 --- a/.github/workflows/benchmark.yml +++ b/.github/workflows/benchmark.yml @@ -19,7 +19,8 @@ jobs: path: "." persist-credentials: false - name: Setup Miniforge - uses: conda-incubator/setup-miniconda@v3 + # Pinned to v3.2.0. + uses: conda-incubator/setup-miniconda@835234971496cad1653abb28a638a281cf32541f with: miniforge-version: "24.1.2-0" activate-environment: asv-bench diff --git a/.github/workflows/check_commit_messages.yml b/.github/workflows/check_commit_messages.yml index dc841fef3f..ece0bcac4e 100644 --- a/.github/workflows/check_commit_messages.yml +++ b/.github/workflows/check_commit_messages.yml @@ -8,6 +8,9 @@ concurrency: group: ${{ github.workflow }}-${{ github.ref }} cancel-in-progress: true +permissions: + contents: read + jobs: check-commit-prefix: if: startsWith(github.event.pull_request.base.ref, 'stable/') diff --git a/zizmor.yml b/zizmor.yml new file mode 100644 index 0000000000..8d1b34ed48 --- /dev/null +++ b/zizmor.yml @@ -0,0 +1,6 @@ +rules: + unpinned-uses: + config: + policies: + actions/*: ref-pin + psf/*: ref-pin |