silverwindandGitHub d8c3a1afda ci: pin containers to digest, enable more zizmor rules (#38779) ...

Enable more strict "pedantic" zizmor rules and fix issues. Service
containers are pinned to hash and renovate will update them. Enabled
rules:

- https://docs.zizmor.sh/audits/#excessive-permissions
- https://docs.zizmor.sh/audits/#unpinned-images
- https://docs.zizmor.sh/audits/#template-injection

---------

Signed-off-by: silverwind <me@silverwind.io>

2026-08-06 05:16:07 +00:00

..

actions

ci: skip disk cleanup when unnecessary (#38778)

2026-08-05 20:47:18 +02:00

ISSUE_TEMPLATE

chore: simplify issue and pull request templates (#37799)

2026-05-21 06:26:31 +02:00

workflows

ci: pin containers to digest, enable more zizmor rules (#38779)

2026-08-06 05:16:07 +00:00

actionlint.yaml

Update actionlint.yaml

2024-12-12 15:45:27 -05:00

FUNDING.yml

…

labeler.yml

Don't add useless labels which will bother changelog generation (#37267)

2026-04-19 11:34:40 -07:00

pull_request_template.md

chore: simplify issue and pull request templates (#37799)

2026-05-21 06:26:31 +02:00

zizmor.yml

ci: pin containers to digest, enable more zizmor rules (#38779)

2026-08-06 05:16:07 +00:00