summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorJonas Bernoulli <jonas@bernoul.li>2026-03-16 17:43:48 +0100
committerJonas Bernoulli <jonas@bernoul.li>2026-03-16 17:43:48 +0100
commit2902b29ace6f75f7da83f692d2bf5bc3b2d0e3ae (patch)
tree812aa39156cc6ada7b2186d35b35edd889b3257c
parent7131bec61e558e022ce75e2d2d5e55c748fcf8e0 (diff)
ci: Reduce permissions and add zizmor setting
-rw-r--r--.github/workflows/compile.yml4
-rw-r--r--.github/workflows/manual.yml4
-rw-r--r--.github/workflows/stats.yml4
-rw-r--r--.github/workflows/test.yml4
4 files changed, 12 insertions, 4 deletions
diff --git a/.github/workflows/compile.yml b/.github/workflows/compile.yml
index 2c1a987..2102237 100644
--- a/.github/workflows/compile.yml
+++ b/.github/workflows/compile.yml
@@ -3,4 +3,6 @@ on: [push, pull_request]
jobs:
compile:
name: Compile
- uses: emacscollective/workflows/.github/workflows/compile.yml@main
+ uses: | # zizmor: ignore[unpinned-uses] same maintainer as this repo
+ emacscollective/workflows/.github/workflows/compile.yml@main
+ permissions: {}
diff --git a/.github/workflows/manual.yml b/.github/workflows/manual.yml
index 2a655ae..e69a6ce 100644
--- a/.github/workflows/manual.yml
+++ b/.github/workflows/manual.yml
@@ -6,6 +6,8 @@ on:
jobs:
manual:
name: Manual
- uses: emacscollective/workflows/.github/workflows/manual.yml@main
+ uses: | # zizmor: ignore[unpinned-uses] same maintainer as this repo
+ emacscollective/workflows/.github/workflows/manual.yml@main
+ permissions: {}
secrets:
rclone_config: ${{ secrets.RCLONE_CONFIG }}
diff --git a/.github/workflows/stats.yml b/.github/workflows/stats.yml
index 5597fb9..bff434a 100644
--- a/.github/workflows/stats.yml
+++ b/.github/workflows/stats.yml
@@ -7,6 +7,8 @@ on:
jobs:
stats:
name: Statistics
- uses: emacscollective/workflows/.github/workflows/stats.yml@main
+ uses: | # zizmor: ignore[unpinned-uses] same maintainer as this repo
+ emacscollective/workflows/.github/workflows/stats.yml@main
+ permissions: {}
secrets:
rclone_config: ${{ secrets.RCLONE_CONFIG }}
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index 01d105e..a7c53ad 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -3,4 +3,6 @@ on: [push, pull_request]
jobs:
test:
name: Test
- uses: emacscollective/workflows/.github/workflows/test.yml@main
+ uses: | # zizmor: ignore[unpinned-uses] same maintainer as this repo
+ emacscollective/workflows/.github/workflows/test.yml@main
+ permissions: {}