From 1eaefd4d55f16316c441a2b4b57093acc4349457 Mon Sep 17 00:00:00 2001 From: Adam Dangoor Date: Tue, 10 Mar 2026 10:04:49 +0000 Subject: [PATCH 1/2] Fix zizmor lint: upgrade to 1.23.1, disable superfluous-actions and secrets-outside-env Made-with: Cursor --- zizmor.yml | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/zizmor.yml b/zizmor.yml index 4716b1b9..e8cb5642 100644 --- a/zizmor.yml +++ b/zizmor.yml @@ -10,5 +10,9 @@ rules: disable: true template-injection: disable: true + superfluous-actions: + disable: true + secrets-outside-env: + disable: true artipacked: disable: true From 79eebe76a40f70e07b171e63aca5dae48a39af54 Mon Sep 17 00:00:00 2001 From: Adam Dangoor Date: Tue, 10 Mar 2026 10:10:28 +0000 Subject: [PATCH 2/2] Remove secrets-outside-env disable, add environment to jobs that use secrets Made-with: Cursor --- .github/workflows/ci.yml | 1 + zizmor.yml | 2 -- 2 files changed, 1 insertion(+), 2 deletions(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index dbffcad5..000ea2b9 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -15,6 +15,7 @@ permissions: {} jobs: build: + environment: vws strategy: fail-fast: false matrix: diff --git a/zizmor.yml b/zizmor.yml index e8cb5642..f73f1833 100644 --- a/zizmor.yml +++ b/zizmor.yml @@ -12,7 +12,5 @@ rules: disable: true superfluous-actions: disable: true - secrets-outside-env: - disable: true artipacked: disable: true