mirror/pnpm
1
0 Fork 0
mirror of https://github.com/pnpm/pnpm.git synced 2026-10-28 10:38:23 -04:00
Code Issues Packages Projects Releases Wiki Activity

fix(ci): update zizmor-action to v0.7.1 (#16995)

Browse Source 
zizmor 1.31.0 stopped applying ignore comments to the dangerous-triggers
audit, so the three workflow_run workflows failed the zizmor check on
every fork pull request. zizmor-action v0.7.1 defaults to zizmor 1.31.1,
which fixes the regression.

Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
This commit is contained in:
Zoltan KochanandClaude Opus 5.5 authored and GitHub committed 2026-10-16 20:56:00 +02:00
1 parent a1ce6a1bc0
commit 902b4a8efd
1 file changed
+1 -1
Download Patch File Download Diff File Expand all files Collapse all files
.github/workflows/zizmor.yml
+1 -1
View File
@@ -31,7 +31,7 @@ jobs:
persist-credentials: false
- name: Run zizmor
uses: zizmorcore/zizmor-action@f9597c869b2e67095f9b527070297a13a6efe928 # v0.7.0
uses: zizmorcore/zizmor-action@85b2b9fb8e3325e7a23d7d0a9d7ba5ae0f999e3e # v0.7.1
with:
# Fork PRs run with a read-only GITHUB_TOKEN, so SARIF upload to
# Code scanning would fail. In that case, run zizmor anyway and