Skip to content

Harden GitHub Actions workflows with zizmor#696

Open
arash77 wants to merge 1 commit into
mainfrom
harden-workflows
Open

Harden GitHub Actions workflows with zizmor#696
arash77 wants to merge 1 commit into
mainfrom
harden-workflows

Conversation

@arash77

@arash77 arash77 commented Jun 9, 2026

Copy link
Copy Markdown
Member

Apply zizmor security best practices to all workflows.

See https://docs.zizmor.sh/

  • Add top-level permissions: {} to restrict default GITHUB_TOKEN scope
  • Add persist-credentials: false to checkout steps
  • Run zizmor-action on changes to GitHub workflows
  • Monthly dependabot for GitHub Actions updates

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant