Skip to content

Commit eff492f

Browse files
authored
Merge pull request #3750 from crazy-max/zizmor-update
ci(zizmor): use latest version and enable online audits
2 parents c7dfed7 + 4451697 commit eff492f

File tree

3 files changed

+8
-7
lines changed

3 files changed

+8
-7
lines changed

.github/dependabot.yml

Lines changed: 4 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -7,11 +7,10 @@ updates:
77
interval: "daily"
88
cooldown:
99
default-days: 2
10-
ignore:
11-
# ignore this dependency
12-
# it seems a bug with dependabot as pining to commit sha should not
13-
# trigger a new version: https://github.com/docker/buildx/pull/2222#issuecomment-1919092153
14-
- dependency-name: "docker/docs"
10+
groups:
11+
crazy-max-dot-github:
12+
patterns:
13+
- "crazy-max/.github/*"
1514
labels:
1615
- "area/dependencies"
1716
- "bot"

.github/workflows/zizmor.yml

Lines changed: 0 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -26,8 +26,6 @@ jobs:
2626
contents: read
2727
security-events: write
2828
with:
29-
version: v1.22.0
3029
min-severity: medium
3130
min-confidence: medium
3231
persona: pedantic
33-
no-online-audits: true

.github/zizmor.yml

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,4 @@
1+
# https://docs.zizmor.sh/configuration/
2+
rules:
3+
secrets-outside-env: # FIXME: remove this rule when zizmor 1.24.0 is released, fixing the right persona attached to this rule: https://github.com/zizmorcore/zizmor/pull/1783
4+
disable: true

0 commit comments

Comments
 (0)