Fix all Zizmor audit findings#237
Conversation
There was a problem hiding this comment.
This action is deprecated and so I just removed it rather than pinning.
rffontenelle
left a comment
rffontenelle
left a comment
There was a problem hiding this comment.
I was going to ask you to work on this security fix but you were faster fixing it.
I see versions in pre-commit could be updated. Does this need to be done manually or an automation (e.g. dependabot) can do it?
Dependabot can as of very recently: https://github.blog/changelog/2026-03-10-dependabot-now-supports-pre-commit-hooks/ We can make that a separate PR, however. |
StanFromIreland
merged commit 04fe8dc
into
python-docs-translations:main
|
Weren't the changes too strict? https://github.com/python-docs-translations/transifex-automations/actions/runs/26776396669 the CI failed |
| with: | ||
| ref: ${{ steps.version.outputs.current }} | ||
| path: ${{ steps.version.outputs.current }} | ||
| persist-credentials: false |
There was a problem hiding this comment.
fatal: could not read Username for 'https://github.com': No such device or address
possibly related to CI job failure
There was a problem hiding this comment.
We should split the commit job from the rest.
3 participants
No description provided.