Files
install-action/.github/zizmor.yml
2025-12-01 00:24:40 +09:00

17 lines
502 B
YAML

# zizmor configuration
# https://docs.zizmor.sh/configuration/
rules:
dependabot-cooldown: { disable: true } # Useless unless unpinned-uses is enabled.
ref-confusion: { disable: true } # TODO: Old GHA didn't work without this pattern in some cases, but does it seem to be fixed?
secrets-inherit: { disable: true }
unpinned-uses:
config:
policies:
taiki-e/*: any
'*': ref-pin
obfuscation:
ignore:
# We use `shell: cmd` to test compatibility
- ci.yml