From 5268415e60528e2cfb42a8bbcd9c82bb95d038c2 Mon Sep 17 00:00:00 2001 From: Christopher Dignam Date: Fri, 22 May 2026 21:44:39 -0400 Subject: [PATCH] increase github actions strictness ``` zizmor --gh-token=$(gh auth token) .github --fix=all ``` --- .github/workflows/javascript.yml | 14 ++++++++++---- 1 file changed, 10 insertions(+), 4 deletions(-) diff --git a/.github/workflows/javascript.yml b/.github/workflows/javascript.yml index b8640a9..967b298 100644 --- a/.github/workflows/javascript.yml +++ b/.github/workflows/javascript.yml @@ -6,14 +6,18 @@ on: - "master" pull_request: +permissions: {} + jobs: test: runs-on: ubuntu-latest steps: - name: Checkout - uses: actions/checkout@v6 + uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + with: + persist-credentials: false - name: Use Node.js - uses: actions/setup-node@v6 + uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6 with: node-version-file: ".nvmrc" - name: Install dependencies @@ -24,9 +28,11 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout - uses: actions/checkout@v6 + uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + with: + persist-credentials: false - name: Use Node.js - uses: actions/setup-node@v6 + uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6 with: node-version-file: ".nvmrc" - name: Install dependencies