Skip to content

Drop Docker dependency #74

@woodruffw

Description

@woodruffw

Docker was the easiest way for me to bootstrap zizmor here. But it's arguably overkill, plus it isn't included in ubuntu-slim runners.

Earlier versions of this action used setup-uv + uvx zizmor. The downside to that is that uvx ... pays a Python runtime initialization cost (a pretty minor one, but still) and it makes hashing slightly more troublesome, since uvx can fetch multiple distinct architecture wheels rather than Docker fetching a multi-arch OCI image and doing the right delegation with it.

Metadata

Metadata

Assignees

Labels

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions