 silverwind
|
d8c3a1afda
|
ci: pin containers to digest, enable more zizmor rules (#38779)
Enable more strict "pedantic" zizmor rules and fix issues. Service
containers are pinned to hash and renovate will update them. Enabled
rules:
- https://docs.zizmor.sh/audits/#excessive-permissions
- https://docs.zizmor.sh/audits/#unpinned-images
- https://docs.zizmor.sh/audits/#template-injection
---------
Signed-off-by: silverwind <me@silverwind.io>
|
2026-08-06 05:16:07 +00:00 |
|