chore(workflows): add zizmor security gate and harden Actions credential handling#925

Merged

jkowalleck merged 8 commits into

copilot/harden-github-workflows-zizmor

May 8, 2026

Commits on May 8, 2026

Initial plan

Copilot
authored and
jkowalleck
committed
chore(workflows): add zizmor scan and harden checkout credential handling

Copilot
and
jkowalleck
committed
fix: update setup-node pin to v6.4.0 to fix zizmor version comment mismatch

Copilot
and
jkowalleck
committed
chore: pin setup-node to current v6 hash with v6 comment

Copilot
and
jkowalleck
committed
ci: run zizmor on dependabot config and push changes

Copilot
and
jkowalleck
committed
ci: remove explicit inputs from zizmor action call

Copilot
and
jkowalleck
committed
chore(dependabot): add cooldown to update blocks

Copilot
and
jkowalleck
committed
Apply suggestions from code review
jkowalleck
committed