Harden GitHub workflows#166

Open

samdark wants to merge 1 commit into

fix-zizmor-workflows

samdark commented Jun 18, 2026

Member

Summary

Pin reusable yiisoft/actions workflows to a commit SHA.
Set read-only GITHUB_TOKEN permissions for read-only workflows where needed.

Validation

zizmor --no-progress --no-exit-codes package-template/.github/workflows


          Harden GitHub workflows

2de0e03

Copilot AI review requested due to automatic review settings

June 18, 2026 21:14

Copilot AI reviewed

Copilot AI left a comment

Copilot was unable to review this pull request because the user who requested the review has reached their quota limit.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet