Skip to content

chore: Fix GitHub Actions findings with zizmor#196

Merged
Ignacio Vergara Kausel (ivergara) merged 1 commit into
mainfrom
zizmor-fixes
May 12, 2026
Merged

chore: Fix GitHub Actions findings with zizmor#196
Ignacio Vergara Kausel (ivergara) merged 1 commit into
mainfrom
zizmor-fixes

Conversation

@quant-ranger

@quant-ranger quant-ranger Bot commented Apr 4, 2026

Copy link
Copy Markdown
Contributor

This PR automatically fixes findings in GitHub Actions workflows using zizmor.

The following rules are enabled:

  • ref-version-mismatch: A ref-version-mismatch occurs when an action is hash-pinned but the associated tag comment (e.g. # v3.8.1) does not match the pinned commit. This can cause tools like Dependabot to silently ignore the comment instead of refreshing it.
  • dependabot-cooldown: Ensures that dependabot configurations include a cooldown period.

If you run into any problems, feel free to ping Yannik Tausch (@ytausch) or Pavel Zwerschke (@pavelzw).

@ivergara
Ignacio Vergara Kausel (ivergara) merged commit 886d62e into main May 12, 2026
41 of 45 checks passed
@ivergara
Ignacio Vergara Kausel (ivergara) deleted the zizmor-fixes branch May 12, 2026 12:27
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant