Skip to content

Disable zizmor GitHub Advanced Security upload by default#296

Merged
tashian merged 2 commits intomainfrom
carl/disable-ghas-by-default
Mar 3, 2026
Merged

Disable zizmor GitHub Advanced Security upload by default#296
tashian merged 2 commits intomainfrom
carl/disable-ghas-by-default

Conversation

@tashian
Copy link
Contributor

@tashian tashian commented Mar 3, 2026

No description provided.

@tashian tashian requested a review from a team as a code owner March 3, 2026 16:42
@tashian tashian enabled auto-merge March 3, 2026 16:46
- Change actionci.yml zizmor-advanced-security default to false (matching
  zizmor.yml). Public repos must explicitly opt in.
- Remove zizmor and frizbee jobs from goCI.yml to avoid duplicate runs
  for repos that use both goCI.yml and actionci.yml.
- Rename job display names to just "zizmor" and "frizbee".

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
frizbee:
uses: ./.github/workflows/frizbee.yml

build:
Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@dopey these were running twice in some cases because they are in goCI and in actionci. Do we want them in both places?

@hslatman hslatman changed the title ci: Disable zizmor GitHub Advanced Security upload by default Disable zizmor GitHub Advanced Security upload by default Mar 3, 2026
@tashian
Copy link
Contributor Author

tashian commented Mar 3, 2026

@tashian tashian merged commit 28adf33 into main Mar 3, 2026
5 of 6 checks passed
@tashian tashian deleted the carl/disable-ghas-by-default branch March 3, 2026 17:36
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants