Skip to content

Small CI fixups, add a zizmor workflow#53

Open
woodruffw wants to merge 1 commit intomainfrom
ww/ci
Open

Small CI fixups, add a zizmor workflow#53
woodruffw wants to merge 1 commit intomainfrom
ww/ci

Conversation

@woodruffw
Copy link
Copy Markdown
Member

Fixes some lingering unpinned actions and credential persistence; adds a zizmor workflow for enforcement.

Signed-off-by: William Woodruff <william@astral.sh>
@woodruffw woodruffw requested a review from konstin March 31, 2026 16:12
@woodruffw woodruffw self-assigned this Mar 31, 2026
@woodruffw
Copy link
Copy Markdown
Member Author

NB: We should probably upstream these as well 🙂

@codspeed-hq
Copy link
Copy Markdown

codspeed-hq bot commented Mar 31, 2026

Congrats! CodSpeed is installed 🎉

🆕 6 new benchmarks were detected.

You will start to see performance impacts in the reports once the benchmarks are run from your default branch.

Detected benchmarks


Open in CodSpeed

Copy link
Copy Markdown
Member

@konstin konstin left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks!

push:
branches: ["main"]
pull_request:
branches: ["**"]
Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Do we need the branches: ["**"] part here?

Comment on lines +17 to +18
contents: read # Only needed for private repos. Needed to clone the repo.
actions: read # Only needed for private repos. Needed for upload-sarif to read workflow run info.
Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Is this needed if this isn't a private repo?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants