add comment

derrickaw · derrickaw · commit 2a75b9526728 · 2026-06-25T01:23:50.000Z
diff --git a/.github/zizmor.yml b/.github/zizmor.yml
@@ -2,4 +2,4 @@ rules:
   unpinned-uses:
     config:
       policies:
-        "*": ref-pin
+        "*": ref-pin # Allow non-hashed pins, but still require versioned
