Unverified Commit be5b1972 authored by Michael Daniels's avatar Michael Daniels
Browse files

.github/zizmor.yml: disable `secrets-outside-env` rule 

A new rule added in zizmor v1.23.0, this requires that secrets be used only in
a deployment environment.

We do not use environment secrets or deployments, and, per zizmor,
"environment secrets do not interact correctly with reusable workflows
unless the caller workflow uses `secrets: inherit`, which is itself flagged by"
the `secrets-inherit` rule.
parent 590c1ed2

.github/zizmor.yml

+2 −0
Original line number Diff line number Diff line
@@ -10,3 +10,5 @@ 
rules:

  dangerous-triggers:

    disable: true

  secrets-outside-env:

    disable: true