actions: secure the actions workflows with zizmor - #385

Merged

oscarbenjamin merged 9 commits into

flintlib:mainfrom

oscarbenjamin:pr_actions

Apr 4, 2026

Commits on Apr 4, 2026

actions: pin all actions by SHA
oscarbenjamin
committed
caa957f
actions: use env to avoid shell injection
oscarbenjamin
committed
bdc39a2
actions: restrict permissions in jobs
oscarbenjamin
committed
9979b57
actions: set persist-credentials to false
oscarbenjamin
committed
c6bee29
actions: add zizmor ignore for nightly wheels token
oscarbenjamin
committed
b57a58a
actions: set cancel-in-progress to true
oscarbenjamin
committed
b146579
actions: remove all template injection
oscarbenjamin
committed
3dd70e1
actions: minor tweaks for zizmor
oscarbenjamin
committed
651972b
actions: add zizmor check in CI
oscarbenjamin
committed
a1fb4f2