Files
ejs/.github/zizmor.yml
bashonly 32e63d577f Harden CI/CD pipeline (#40)
* Add actionlint and zizmor CI jobs

* Pin all actions to commit hashes

* Pin Deno to hash in release workflow

* Explicitly declare workflow permissions

* Avoid using actions/cache in release workflow and whenever possible
2025-12-30 18:11:18 +01:00

9 lines
185 B
YAML

rules:
concurrency-limits:
ignore:
- release.yml # Can only be triggered by a tag pushed by a maintainer
unpinned-uses:
config:
policies:
"*": hash-pin