ci: audit workflows with zizmor

This commit is contained in:
link2xt
2025-02-14 23:18:34 +00:00
committed by l
parent 5c3d1e7dae
commit 96704eb73d
13 changed files with 93 additions and 2 deletions

View File

@@ -12,6 +12,8 @@ on:
branches:
- main
permissions: {}
jobs:
format:
name: check flake formatting
@@ -20,6 +22,7 @@ jobs:
- uses: actions/checkout@v4
with:
show-progress: false
persist-credentials: false
- uses: DeterminateSystems/nix-installer-action@main
- uses: DeterminateSystems/magic-nix-cache-action@main
- run: nix fmt
@@ -80,6 +83,7 @@ jobs:
- uses: actions/checkout@v4
with:
show-progress: false
persist-credentials: false
- uses: DeterminateSystems/nix-installer-action@main
- uses: DeterminateSystems/magic-nix-cache-action@main
- run: nix build .#${{ matrix.installable }}
@@ -99,6 +103,7 @@ jobs:
- uses: actions/checkout@v4
with:
show-progress: false
persist-credentials: false
- uses: DeterminateSystems/nix-installer-action@main
- uses: DeterminateSystems/magic-nix-cache-action@main
- run: nix build .#${{ matrix.installable }}