Skip to content

chore: add zizmor#13

Merged
Sehat1137 merged 1 commit intoreagento:masterfrom
danfimov:add-zizmor
Oct 15, 2025
Merged

chore: add zizmor#13
Sehat1137 merged 1 commit intoreagento:masterfrom
danfimov:add-zizmor

Conversation

@danfimov
Copy link
Contributor

closes #10

Copilot AI review requested due to automatic review settings October 15, 2025 08:54
Copy link

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull Request Overview

This PR adds zizmor (a GitHub Actions security linter) to the development workflow and addresses associated security improvements. The changes include adding zizmor as a development dependency, creating a configuration file for it, and enhancing security practices across GitHub Actions workflows.

  • Added zizmor as a development dependency and created its configuration
  • Enhanced security by pinning GitHub Actions to specific commit hashes
  • Added explicit permissions and security configurations to workflows

Reviewed Changes

Copilot reviewed 5 out of 5 changed files in this pull request and generated no comments.

Show a summary per file
File Description
requirements-dev.txt Added zizmor dependency for GitHub Actions security linting
action.yml Pinned actions/setup-python to specific commit hash for security
.github/zizmor.yml Created zizmor configuration file to ignore specific triggers
.github/workflows/master.yml Enhanced security with commit hash pinning and disabled credential persistence
.github/workflows/linters.yaml Added zizmor job and applied security improvements across existing jobs

Tip: Customize your code reviews with copilot-instructions.md. Create the file or learn how to get started.

@Sehat1137
Copy link
Member

@danfimov thx :)

@Sehat1137 Sehat1137 merged commit 448327a into reagento:master Oct 15, 2025
4 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Add zizmor for github actions lint

4 participants