Skip to content

[zizmor] ignore superfluous-actions #7548

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
youknowone merged 12 commits into from
Apr 2, 2026
+25 −15
Merged

[zizmor] ignore superfluous-actions #7548

Changes from 1 commit
Commits
Show all changes
12 commits
Select commit Hold shift + click to select a range
a49d7e5
Use `rustup`
ShaharNaveh Mar 30, 2026
211f6e7
fix
ShaharNaveh Mar 30, 2026
b6bc9c5
Fix miri
ShaharNaveh Mar 31, 2026
739a88f
Merge remote-tracking branch 'upstream/main' into ci-rustup
ShaharNaveh Mar 31, 2026
9d71f40
Revert `rustup` changes
ShaharNaveh Mar 31, 2026
ff15350
Use `dtolnay/rust-toolchain` instead of `rustup`
ShaharNaveh Mar 31, 2026
15178ce
Add zizmor conf
ShaharNaveh Mar 31, 2026
e843ddc
Pin to `@stable`
ShaharNaveh Mar 31, 2026
53381ae
Pin to `@stable` in `release.yml`
ShaharNaveh Mar 31, 2026
c7d5ec8
Remove leftover
ShaharNaveh Mar 31, 2026
b735410
Fix cargo check
ShaharNaveh Mar 31, 2026
b1ff16b
Fix conf
ShaharNaveh Mar 31, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Prev Previous commit
Next Next commit
Add zizmor conf
  • Loading branch information
@ShaharNaveh
ShaharNaveh committed Mar 31, 2026
commit 15178ce3a46b79ffa4c55ca5270a0b9192fff8ba
16 changes: 16 additions & 0 deletions .github/zizmor.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,16 @@
rules:
unpinned-uses:
config:
policies:
# dtolnay/rust-toolchain is a trusted action that uses lightweight branch
# refs (@stable, @nightly, etc.) by design. Pinning to a hash would break
# the intended usage pattern.
#
# We can remove this once https://github.com/dtolnay/rust-toolchain/issues/180 is resolved
dtolnay/rust-toolchain: any
# dtolnay/rust-toolchain handles component installation, target addition, and
# override configuration beyond what a bare `rustup` invocation provides.
#
# See: https://github.com/zizmorcore/zizmor/issues/1817
superfluous-actions:
disable: true