We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
1 parent 4d1f9de commit e38e195Copy full SHA for e38e195
3 files changed
.circleci/config.yml
.github/workflows/ci.yml
@@ -0,0 +1,26 @@
1
+name: CI
2
+
3
+on:
4
+ push:
5
+ branches:
6
+ - master
7
+ pull_request:
8
9
+concurrency:
10
+ group: ${{ github.workflow_ref }}-${{ github.event.pull_request.number || github.run_id }}
11
+ cancel-in-progress: true
12
13
+permissions:
14
+ contents: read
15
16
+jobs:
17
+ validate-plugins:
18
+ name: validate-plugins
19
+ uses: bitcart/bitcart-actions/.github/workflows/validate-plugins.yml@master
20
21
+ zizmor:
22
+ name: zizmor
23
+ uses: bitcart/bitcart-actions/.github/workflows/zizmor-audit.yml@master
24
+ permissions:
25
26
+ security-events: write
.github/zizmor.yml
@@ -0,0 +1,5 @@
+rules:
+ unpinned-uses:
+ config:
+ policies:
+ "*": ref-pin
0 commit comments