mirror of
https://github.com/basecamp/once-campfire.git
synced 2026-08-23 07:21:06 +09:00
Bump actionlint and zizmor-action to current releases (#250)
Dependabot version updates are disabled for this repo, so the weekly github-actions group never proposed these. The pins had been frozen since March: zizmor-action v0.5.2 ships zizmor 1.23.1, which flags secrets-outside-env at the default persona -- that moved to the auditor persona in zizmor 1.24.0. v0.6.2 ships zizmor 1.29.0. Both linters pass locally at the new versions.
This commit is contained in:
@@ -60,10 +60,10 @@ jobs:
|
||||
persist-credentials: false
|
||||
|
||||
- name: Run actionlint
|
||||
uses: rhysd/actionlint@393031adb9afb225ee52ae2ccd7a5af5525e03e8 # v1.7.11
|
||||
uses: rhysd/actionlint@914e7df21a07ef503a81201c76d2b11c789d3fca # v1.7.12
|
||||
|
||||
- name: Run zizmor
|
||||
uses: zizmorcore/zizmor-action@71321a20a9ded102f6e9ce5718a2fcec2c4f70d8 # v0.5.2
|
||||
uses: zizmorcore/zizmor-action@3dc1ecc9bcb9e94e9b2c709687979e1298497054 # v0.6.2
|
||||
with:
|
||||
advanced-security: false
|
||||
|
||||
|
||||
Reference in New Issue
Block a user