From 51b416c37c4f281340fe10ccd7a4ac301c4cd4fc Mon Sep 17 00:00:00 2001
From: Patrick Linnane <patrick@linnane.io>
Date: Fri, 10 Jul 2026 13:47:02 -0700
Subject: [PATCH] shared-config: deprecate zizmor.yml

Signed-off-by: Patrick Linnane <patrick@linnane.io>
---
 .github/actions/sync/shared-config.rb | 12 ++++--------
 .github/zizmor.yml                    |  5 -----
 2 files changed, 4 insertions(+), 13 deletions(-)
 delete mode 100644 .github/zizmor.yml

diff --git a/.github/actions/sync/shared-config.rb b/.github/actions/sync/shared-config.rb
index 6dcf576d..a0c27872 100755
--- a/.github/actions/sync/shared-config.rb
+++ b/.github/actions/sync/shared-config.rb
@@ -52,7 +52,6 @@ def git(*args)
   check_prs_workflow_yaml,
 ].freeze
 stale_issues_and_prs_workflow_yaml = ".github/workflows/stale-issues-and-prs.yml"
-zizmor_yml = ".github/zizmor.yml"
 codeql_extensions_homebrew_actions_yml = ".github/codeql/extensions/homebrew-actions.yml"
 brewsh_assets_url = "https://brew.sh"
 
@@ -157,8 +156,7 @@ def git(*args)
   README.md
 ].freeze
 
-deprecated_lock_threads = ".github/workflows/lock-threads.yml"
-deprecated_stale_issues_workflow_yaml = ".github/workflows/stale-issues.yml"
+deprecated_zizmor_yml = ".github/zizmor.yml"
 
 puts "Detecting changes…"
 [
@@ -169,12 +167,10 @@ def git(*args)
   rubocop_yaml,
   dependabot_yaml,
   check_template_rb,
-  deprecated_lock_threads,
-  deprecated_stale_issues_workflow_yaml,
+  deprecated_zizmor_yml,
   actionlint_workflow_yaml,
   *check_workflow_yamls,
   stale_issues_and_prs_workflow_yaml,
-  zizmor_yml,
   codeql_extensions_homebrew_actions_yml,
 ].each do |path|
   target_path = target_directory_path/path
@@ -267,7 +263,7 @@ def git(*args)
     )
   when dependabot_yaml, actionlint_workflow_yaml, check_issues_workflow_yaml, check_prs_workflow_yaml,
        stale_issues_and_prs_workflow_yaml,
-       zizmor_yml, codeql_extensions_homebrew_actions_yml
+       codeql_extensions_homebrew_actions_yml
     contents = if path == dependabot_yaml
       dependabot_config
     else
@@ -295,7 +291,7 @@ def git(*args)
     next if repository_name == ".github"
 
     FileUtils.rm_f target_path
-  when deprecated_lock_threads, deprecated_stale_issues_workflow_yaml
+  when deprecated_zizmor_yml
     next unless target_path.exist?
 
     git "-C", target_directory, "rm", path
diff --git a/.github/zizmor.yml b/.github/zizmor.yml
deleted file mode 100644
index 37fe3fad..00000000
--- a/.github/zizmor.yml
+++ /dev/null
@@ -1,5 +0,0 @@
-rules:
-  unpinned-uses:
-    config:
-      policies:
-        Homebrew/actions/*: ref-pin