Add pinact and zizmor workflow checks - #1

Merged

demeyerthom merged 1 commit into

May 8, 2026

demeyerthom commented Apr 28, 2026

Summary

Adds pinact workflow to automatically pin GitHub Actions to commit SHAs, preventing supply chain attacks from mutable tags
Adds zizmor workflow to scan GitHub Actions workflows for security issues
Pins existing actions in workflows to commit SHAs via pinact run


          Add pinact and zizmor workflow checks

c272958

demeyerthom self-assigned this

demeyerthom merged commit 972818a into master

2 checks passed

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet