blob: 0eea96ed7da9751c7c5bc612c48a59391f89b03b (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
|
rules:
dangerous-triggers:
# Before ignoring a file, assume all inputs are malicious, assign explicit
# minimal permissions, and do not use actions/checkout.
ignore:
- labels.yml
- new_contributor_pr.yml
- check_pr_quality.yml
unpinned-uses:
config:
policies:
actions/*: ref-pin
psf/*: ref-pin
|
