Skip to content

fix(styles): fix split-corpus fallout #1139

fix(styles): fix split-corpus fallout

fix(styles): fix split-corpus fallout #1139

name: Actions Security
permissions: {}
on:
push:
branches: ["main"]
pull_request:
branches: ["main"]
jobs:
actionlint:
name: actionlint
runs-on: ubuntu-latest
permissions:
contents: read
steps:
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
with:
persist-credentials: false
- name: Download actionlint
id: get_actionlint
run: bash <(curl -sSfL https://raw.githubusercontent.com/rhysd/actionlint/main/scripts/download-actionlint.bash)
shell: bash
- name: Lint workflow files
env:
ACTIONLINT: ${{ steps.get_actionlint.outputs.executable }}
run: $ACTIONLINT -color
shell: bash
zizmor:
name: zizmor
runs-on: ubuntu-latest
permissions:
security-events: write # upload SARIF to code scanning
contents: read
actions: read
steps:
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
with:
persist-credentials: false
- name: Run zizmor
uses: zizmorcore/zizmor-action@5f14fd08f7cf1cb1609c1e344975f152c7ee938d # v0.5.6
with:
min-confidence: medium # skip Low-confidence findings (artipacked, cache-poisoning)