Gitea/.github/zizmor.yml at d8c3a1afda60459094b8dd4cf110b6375100b3b5 - Gitea - Gitea · John71

Gitea-John71/Gitea

mirror of https://github.com/go-gitea/gitea.git synced 2026-08-07 10:52:17 +00:00

Files

T

silverwind d8c3a1afda ci: pin containers to digest, enable more zizmor rules (#38779 )

Enable more strict "pedantic" zizmor rules and fix issues. Service
containers are pinned to hash and renovate will update them. Enabled
rules:

- https://docs.zizmor.sh/audits/#excessive-permissions
- https://docs.zizmor.sh/audits/#unpinned-images
- https://docs.zizmor.sh/audits/#template-injection

---------

Signed-off-by: silverwind <me@silverwind.io>

2026-08-06 05:16:07 +00:00

8 lines

135 B

YAML

Raw Blame History

 rules:
   anonymous-definition:
     disable: true
   undocumented-permissions:
     disable: true
   concurrency-limits:
     disable: true