cache-manager - fix: use store.deleteMany in mdel instead of per-key delete loop #28

	name: check-workflows

	on:
	push:
	branches: [main]
	pull_request:

	permissions: {}

	jobs:
	zizmor:
	runs-on: ubuntu-latest
	permissions:
	contents: read
	actions: read
	# SARIF upload. GitHub grants read-only on fork PRs regardless; permission
	# values cannot be expressions, so the write grant stays and the zizmor
	# step below skips Advanced Security on forks.
	security-events: write
	steps:
	- name: Checkout
	uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
	with:
	persist-credentials: false

	- name: Install Socket Firewall
	uses: SocketDev/action@ba6de6cc0565af1f42295590380973573297e31f # v1.3.2
	with:
	mode: firewall-free
	firewall-version: "1.15.0"

	- name: Run zizmor
	uses: zizmorcore/zizmor-action@3dc1ecc9bcb9e94e9b2c709687979e1298497054 # v0.6.2
	with:
	# Fork PRs cannot upload SARIF (read-only token). Lint with annotations instead.
	advanced-security: ${{ github.event_name != 'pull_request' \|\| github.event.pull_request.head.repo.full_name == github.repository }}
	annotations: ${{ github.event_name == 'pull_request' && github.event.pull_request.head.repo.full_name != github.repository }}

Navigation Menu