From 8573192916584d52349ad17f90ae16741ddbc212 Mon Sep 17 00:00:00 2001 From: Rob Ede Date: Thu, 6 Aug 2026 12:01:51 +0100 Subject: [PATCH] ci: fix zizmor findings --- .github/dependabot.yml | 6 ++++++ .github/workflows/coverage.yml | 2 ++ .github/workflows/release.yml | 1 + 3 files changed, 9 insertions(+) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index c938244..548f5c1 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -4,12 +4,18 @@ updates: directory: / schedule: interval: monthly + cooldown: + default-days: 7 - package-ecosystem: nix directory: / schedule: interval: monthly + cooldown: + default-days: 7 - package-ecosystem: cargo directory: / schedule: interval: monthly + cooldown: + default-days: 7 versioning-strategy: lockfile-only diff --git a/.github/workflows/coverage.yml b/.github/workflows/coverage.yml index b7bd0b1..63cf9a8 100644 --- a/.github/workflows/coverage.yml +++ b/.github/workflows/coverage.yml @@ -16,6 +16,8 @@ jobs: runs-on: ubuntu-latest steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + persist-credentials: false - name: Install Rust uses: actions-rust-lang/setup-rust-toolchain@166cdcfd11aee3cb47222f9ddb555ce30ddb9659 # v1.17.0 with: diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index b3a4459..ae1c2b9 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -18,6 +18,7 @@ jobs: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: fetch-depth: 0 + persist-credentials: false - name: Install Rust uses: actions-rust-lang/setup-rust-toolchain@166cdcfd11aee3cb47222f9ddb555ce30ddb9659 # v1.17.0