Skip to content

ci: address zizmor audit findings - #71

Draft
claude[bot] wants to merge 1 commit into
mainfrom
ci/zizmor-audit-fixes
Draft

claude[bot] wants to merge 1 commit into
mainfrom
ci/zizmor-audit-fixes

Conversation

@claude

@claude claude Bot commented Oct 20, 2026

Copy link
Copy Markdown
Contributor

Requested via Slack thread

This workflow change clears the finding zizmor 1.31 reports for this repo in the org-wide audit. The intentional npm install -g . in the Test step of test.yml (installing the package under test) is suppressed inline with # zizmor: ignore[adhoc-packages] on that step's run: | line, since zizmor does not pick up a comment placed inside the script block; nothing needed an actual fix.


Generated by Claude Code

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant