Merge branch 'main' into dependabot/github_actions/jdx/mise-action-4.0.1

Davidonium · web-flow · commit 8b9baf94e798 · 2026-03-30T11:08:10.000+02:00
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
@@ -17,7 +17,7 @@ jobs:
           fetch-depth: 0
           persist-credentials: false
 
-      # zizmor: ignore[cache-poisoning] -- mise verifies tool checksums via mise.lock
+
       - uses: jdx/mise-action@1648a7812b9aeae629881980618f079932869151 # v4.0.1
         with:
           version: 2026.3.8
diff --git a/.github/zizmor.yaml b/.github/zizmor.yaml
@@ -0,0 +1,4 @@
+rules:
+  cache-poisoning:
+    ignore:
+      - release.yml # cache poisoning on mise is handled with a lockfile

-Original file line number
+Diff line change
@@ @@ -0,0 +1,4 @@ @@
 +rules:
 +  cache-poisoning:
 +    ignore:
 +      - release.yml # cache poisoning on mise is handled with a lockfile