ci: add zizmor workflow and pin all GitHub Actions to SHA hashes (#5237)

This commit is contained in:
Benji Visser 2026-03-25 12:28:41 -04:00 committed by GitHub
parent e909d3e4a1
commit f84563175f
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
15 changed files with 92 additions and 41 deletions

View file

@ -9,7 +9,9 @@ jobs:
contents: write
pull-requests: write
steps:
- uses: actions/checkout@v4
- uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
with:
persist-credentials: false
- name: Extract version from release
id: get_version
run: |
@ -20,7 +22,7 @@ jobs:
sed -i "s/version = \".*\"/version = \"${{ steps.get_version.outputs.version }}\"/" pyproject.toml
- name: Create Pull Request
id: create-pr
uses: peter-evans/create-pull-request@v6
uses: peter-evans/create-pull-request@c5a7806660adbe173f04e3e038b0ccdcd758773c # v6
with:
commit-message: "chore: bump version to ${{ steps.get_version.outputs.version }}"
title: "chore: bump version to ${{ steps.get_version.outputs.version }}"