diff options
| author | Jacob Walls <jacobtylerwalls@gmail.com> | 2025-11-14 14:06:21 -0500 |
|---|---|---|
| committer | Jacob Walls <jacobtylerwalls@gmail.com> | 2025-11-21 14:37:40 -0500 |
| commit | a9367c262fcb6791a16ad068a11b5aa02848a646 (patch) | |
| tree | b96cec45ab88dff772892fc2529582ac417ffaa2 | |
| parent | 3a493d45454e90e566cf5cc64d32e4c054f83056 (diff) | |
[6.0.x] Configured dangerous-triggers zizmor rule.
Backport of 846613e521104fa2f2e1c2023e4a1a9886a2ff48 from main.
| -rw-r--r-- | .github/workflows/labels.yml | 2 | ||||
| -rw-r--r-- | .github/workflows/new_contributor_pr.yml | 4 | ||||
| -rw-r--r-- | zizmor.yml | 4 |
3 files changed, 10 insertions, 0 deletions
diff --git a/.github/workflows/labels.yml b/.github/workflows/labels.yml index 6986eec033..79ee8af59d 100644 --- a/.github/workflows/labels.yml +++ b/.github/workflows/labels.yml @@ -3,6 +3,8 @@ name: Labels on: pull_request_target: types: [ edited, opened, reopened, ready_for_review ] + branches: + - main concurrency: group: ${{ github.workflow }}-${{ github.ref }} diff --git a/.github/workflows/new_contributor_pr.yml b/.github/workflows/new_contributor_pr.yml index 958ebc64d4..194adb3bb8 100644 --- a/.github/workflows/new_contributor_pr.yml +++ b/.github/workflows/new_contributor_pr.yml @@ -3,12 +3,16 @@ name: New contributor message on: pull_request_target: types: [opened] + branches: + - main permissions: pull-requests: write jobs: build: + # Only trigger on the main Django repository + if: github.repository == 'django/django' name: Hello new contributor runs-on: ubuntu-latest steps: diff --git a/zizmor.yml b/zizmor.yml index 8d1b34ed48..76e53f73cc 100644 --- a/zizmor.yml +++ b/zizmor.yml @@ -1,4 +1,8 @@ rules: + dangerous-triggers: + ignore: + - labels.yml + - new_contributor_pr.yml unpinned-uses: config: policies: |