Skip to content

ci: add zizmor workflow#450

Merged
KevinVandy merged 15 commits into
TanStack:mainfrom
Sheraff:ci/add-zizmor
May 14, 2026
Merged

ci: add zizmor workflow#450
KevinVandy merged 15 commits into
TanStack:mainfrom
Sheraff:ci/add-zizmor

Conversation

@Sheraff
Copy link
Copy Markdown
Contributor

@Sheraff Sheraff commented May 12, 2026 •
edited
Loading

Summary

  • Add a pinned zizmor GitHub Actions Security Analysis workflow.
  • Harden existing workflows so zizmor passes under the regular persona.

@AlemTuzlak AlemTuzlak mentioned this pull request May 13, 2026
Closed
Sheraff
Sheraff commented May 13, 2026
View reviewed changes
Comment thread .github/workflows/check-skills.yml Outdated
Sheraff
Sheraff commented May 13, 2026
View reviewed changes
Comment thread .github/workflows/e2e-opportunistic-matrix.yml Outdated
Sheraff
Sheraff commented May 13, 2026
View reviewed changes
Comment thread .github/workflows/notify-intent.yml Outdated
Sheraff
Sheraff commented May 13, 2026
View reviewed changes
Comment thread .github/workflows/pr.yml Outdated
Sheraff
Sheraff commented May 13, 2026
View reviewed changes
Comment thread .github/workflows/pr.yml Outdated
Sheraff
Sheraff commented May 13, 2026
View reviewed changes
Comment thread .github/workflows/pr.yml Outdated
Sheraff
Sheraff commented May 13, 2026
View reviewed changes
Comment thread .github/workflows/release.yml Outdated
Sheraff
Sheraff commented May 13, 2026
View reviewed changes
Comment thread .github/workflows/validate-skills.yml Outdated
Sheraff
Sheraff commented May 13, 2026
View reviewed changes
Comment thread .github/workflows/validate-skills.yml Outdated
Sheraff
Sheraff commented May 13, 2026
View reviewed changes
Comment thread .github/workflows/check-skills.yml Outdated
Sheraff
Sheraff commented May 13, 2026
View reviewed changes
Comment thread .github/workflows/notify-intent.yml Outdated
Sheraff
Sheraff commented May 13, 2026
View reviewed changes
Comment thread .github/workflows/e2e-opportunistic-matrix.yml Outdated
@lachlancollins lachlancollins requested a review from a team as a code owner May 13, 2026 22:33
@KevinVandy KevinVandy merged commit 0cd5034 into TanStack:main May 14, 2026
6 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@lachlancollins lachlancollins lachlancollins approved these changes

@KevinVandy KevinVandy KevinVandy approved these changes

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

3 participants

@Sheraff @lachlancollins @KevinVandy