Skip to content

[PD1-905] Roll out zizmor#5

Merged
joshuanapoli merged 1 commit into
mainfrom
pd1-905-zizmor
Jun 9, 2026
Merged

[PD1-905] Roll out zizmor#5
joshuanapoli merged 1 commit into
mainfrom
pd1-905-zizmor

Conversation

@joshuanapoli

Copy link
Copy Markdown
Member

Summary

Roll out zizmor static analysis.

  • artipacked: added persist-credentials: false to checkout steps in .github/workflows/ci.yml and .github/workflows/pyproject-license-check.yml (auto-fix).
  • excessive-permissions: added a minimal workflow-level permissions: contents: read block to .github/workflows/ci.yml.

zizmor now reports no findings.

Resolve all zizmor GitHub Actions static-analysis findings.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
@joshuanapoli joshuanapoli self-assigned this Jun 9, 2026
@gemini-code-assist

Copy link
Copy Markdown

Note

Gemini is unable to generate a review for this pull request due to the file types involved not being currently supported.

@joshuanapoli joshuanapoli requested review from alok27a and amy-nihao June 9, 2026 15:36
@joshuanapoli joshuanapoli merged commit 9a82dc1 into main Jun 9, 2026
12 checks passed
@joshuanapoli joshuanapoli deleted the pd1-905-zizmor branch June 9, 2026 22:57
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants