diff options
| author | Daniel Hast <hast.daniel@protonmail.com> | 2026-03-07 14:29:15 -0500 |
|---|---|---|
| committer | Daniel Hast <hast.daniel@protonmail.com> | 2026-03-09 21:36:20 -0400 |
| commit | d1314018ccccaad750d2f79c3d4cda385c7967c9 (patch) | |
| tree | 5e6d49107e9181a5a6cbe2b92d3eafe7aa120593 /runtime/syntax/python.vim | |
| parent | 9734a6ce473c961495492151153e28635e63426d (diff) | |
| download | rneovim-d1314018ccccaad750d2f79c3d4cda385c7967c9.tar.gz rneovim-d1314018ccccaad750d2f79c3d4cda385c7967c9.tar.bz2 rneovim-d1314018ccccaad750d2f79c3d4cda385c7967c9.zip | |
ci: pin third-party action dependencies to commit hashes
This improves CI security by ensuring that action dependencies cannot be
changed by upstream repositories without updating the use of the
dependency in this repo.
Official GitHub-maintained actions are excluded from this requirement
and are left pinned by a tag instead of a commit hash. This action
dependency pinning policy is codified in `.github/zizmor.yml` so that
Zizmor (a static analysis tool for GitHub Actions) doesn't flag these as
unpinned dependencies.
Also add cooldown timer for Dependabot. This fixes these two Zizmor
audits:
* https://docs.zizmor.sh/audits/#dependabot-cooldown
* https://docs.zizmor.sh/audits/#unpinned-uses
Diffstat (limited to 'runtime/syntax/python.vim')
0 files changed, 0 insertions, 0 deletions