Skip to content

chore: add security analysis workflow#350

Merged
Boshen merged 2 commits intomainfrom
chore/add-security-analysis-workflow
Apr 22, 2026
Merged

chore: add security analysis workflow#350
Boshen merged 2 commits intomainfrom
chore/add-security-analysis-workflow

Conversation

@Boshen
Copy link
Copy Markdown
Member

@Boshen Boshen commented Apr 22, 2026

Summary

  • add Security Analysis workflow using oxc-project/security-action v1.0.1 pinned to 4211cd3f56ba742507263ea4a999f3be4165a53c
  • remove old zizmor and cargo deny workflows
  • set checkout steps to avoid persisted GitHub credentials

Testing

  • zizmor --config <(curl -fsSL https://raw.githubusercontent.com/oxc-project/security-action/4211cd3f56ba742507263ea4a999f3be4165a53c/zizmor.yml) --strict-collection --show-audit-urls=always --min-severity=medium .
  • GitHub Actions: Security Analysis passed on a169b5f

Copy link
Copy Markdown

@chatgpt-codex-connector chatgpt-codex-connector Bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 6d13fa100c

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

Comment thread .github/workflows/security.yml
@Boshen Boshen merged commit e81fbc6 into main Apr 22, 2026
12 checks passed
@Boshen Boshen deleted the chore/add-security-analysis-workflow branch April 22, 2026 12:00
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant