Skip to content

ci: add zizmor workflow#1163

Merged
KevinVandy merged 2 commits into
TanStack:mainfrom
Sheraff:ci/add-zizmor
May 13, 2026
Merged

ci: add zizmor workflow#1163
KevinVandy merged 2 commits into
TanStack:mainfrom
Sheraff:ci/add-zizmor

Conversation

@Sheraff
Copy link
Copy Markdown
Contributor

@Sheraff Sheraff commented May 12, 2026

Summary

  • add a pinned zizmor workflow for GitHub Actions security analysis
  • harden existing workflows for zizmor by pinning action refs, disabling checkout credential persistence, and narrowing write permissions

@pkg-pr-new
Copy link
Copy Markdown

pkg-pr-new Bot commented May 12, 2026

More templates

@tanstack/angular-virtual

npm i https://pkg.pr.new/@tanstack/angular-virtual@1163

@tanstack/lit-virtual

npm i https://pkg.pr.new/@tanstack/lit-virtual@1163

@tanstack/react-virtual

npm i https://pkg.pr.new/@tanstack/react-virtual@1163

@tanstack/solid-virtual

npm i https://pkg.pr.new/@tanstack/solid-virtual@1163

@tanstack/svelte-virtual

npm i https://pkg.pr.new/@tanstack/svelte-virtual@1163

@tanstack/virtual-core

npm i https://pkg.pr.new/@tanstack/virtual-core@1163

@tanstack/vue-virtual

npm i https://pkg.pr.new/@tanstack/vue-virtual@1163

commit: c728fec

Comment thread .github/workflows/zizmor.yml Outdated
@KevinVandy KevinVandy merged commit 792bece into TanStack:main May 13, 2026
7 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants