Skip to content

fix: harden GitHub Actions workflows#525

Merged
jdalton merged 1 commit intomainfrom
fix/zizmor-workflow-security
Mar 25, 2026
Merged

fix: harden GitHub Actions workflows#525
jdalton merged 1 commit intomainfrom
fix/zizmor-workflow-security

Conversation

@reberhardt7
Copy link
Copy Markdown
Contributor

@reberhardt7 reberhardt7 commented Mar 25, 2026

Summary

  • Add cooldown configuration (default-days: 7) to Dependabot updates in .github/dependabot.yml to address zizmor's dependabot-cooldown medium-severity finding
  • This prevents excessive Dependabot update frequency and reduces unnecessary CI load

Add cooldown configuration (default-days: 7) to Dependabot updates
to prevent excessive update frequency and reduce CI load.
@jdalton jdalton merged commit d42ba89 into main Mar 25, 2026
9 checks passed
@jdalton jdalton deleted the fix/zizmor-workflow-security branch March 25, 2026 12:23
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants