diff options
| author | Jonas Bernoulli <jonas@bernoul.li> | 2026-04-20 10:35:30 +0200 |
|---|---|---|
| committer | Jonas Bernoulli <jonas@bernoul.li> | 2026-04-20 10:35:30 +0200 |
| commit | 3941603f4422d16581e5d782458fa6fbfd432932 (patch) | |
| tree | f7586f9dd4dc38b7d4d694e274230f7ffeb45147 | |
| parent | d0935036eb894680d8ca1a4d1ed8e8d5d90005e5 (diff) | |
ci: Reduce permissions and add zizmor setting
| -rw-r--r-- | .github/workflows/compile.yml | 4 | ||||
| -rw-r--r-- | .github/workflows/manual.yml | 4 | ||||
| -rw-r--r-- | .github/workflows/stats.yml | 4 |
3 files changed, 9 insertions, 3 deletions
diff --git a/.github/workflows/compile.yml b/.github/workflows/compile.yml index 2c1a987..2102237 100644 --- a/.github/workflows/compile.yml +++ b/.github/workflows/compile.yml @@ -3,4 +3,6 @@ on: [push, pull_request] jobs: compile: name: Compile - uses: emacscollective/workflows/.github/workflows/compile.yml@main + uses: | # zizmor: ignore[unpinned-uses] same maintainer as this repo + emacscollective/workflows/.github/workflows/compile.yml@main + permissions: {} diff --git a/.github/workflows/manual.yml b/.github/workflows/manual.yml index 2a655ae..e69a6ce 100644 --- a/.github/workflows/manual.yml +++ b/.github/workflows/manual.yml @@ -6,6 +6,8 @@ on: jobs: manual: name: Manual - uses: emacscollective/workflows/.github/workflows/manual.yml@main + uses: | # zizmor: ignore[unpinned-uses] same maintainer as this repo + emacscollective/workflows/.github/workflows/manual.yml@main + permissions: {} secrets: rclone_config: ${{ secrets.RCLONE_CONFIG }} diff --git a/.github/workflows/stats.yml b/.github/workflows/stats.yml index 5597fb9..bff434a 100644 --- a/.github/workflows/stats.yml +++ b/.github/workflows/stats.yml @@ -7,6 +7,8 @@ on: jobs: stats: name: Statistics - uses: emacscollective/workflows/.github/workflows/stats.yml@main + uses: | # zizmor: ignore[unpinned-uses] same maintainer as this repo + emacscollective/workflows/.github/workflows/stats.yml@main + permissions: {} secrets: rclone_config: ${{ secrets.RCLONE_CONFIG }} |