mirror of
https://github.com/taiki-e/install-action.git
synced 2026-04-09 18:11:48 +08:00
50332096a7
https://docs.zizmor.sh/audits/#misfeature > Prior to v1.21.0, this check was performed by the obfuscation audit.
17 lines
513 B
YAML
17 lines
513 B
YAML
# zizmor configuration
|
|
# https://docs.zizmor.sh/configuration/
|
|
|
|
rules:
|
|
dependabot-cooldown: { disable: true } # Useless unless hash-pin is forced by unpinned-uses.
|
|
ref-confusion: { disable: true } # TODO: Old GHA didn't work without this pattern in some cases, but does it seem to be fixed?
|
|
secrets-inherit: { disable: true }
|
|
unpinned-uses:
|
|
config:
|
|
policies:
|
|
taiki-e/*: any
|
|
'*': ref-pin
|
|
misfeature:
|
|
ignore:
|
|
# We use `shell: cmd` to test compatibility.
|
|
- ci.yml
|