Skip to content

feat: add zizmor and remediate findings - #326

Merged
paul-aiyedun merged 7 commits into
rapidsai:mainfrom
gforsyth:securitize
Apr 24, 2026
Merged

feat: add zizmor and remediate findings#326
paul-aiyedun merged 7 commits into
rapidsai:mainfrom
gforsyth:securitize

Conversation

@gforsyth

@gforsyth gforsyth commented Apr 24, 2026

Copy link
Copy Markdown
Contributor
  • fix: remediate template injection
  • fix: pin all third-party actions
  • chore: ignore github-env warning in sccache setup
  • fix: add persist-credentials: false across all checkouts
  • fix: set permissions explicitly per-job
  • fix: inherit secrets for jobs that need them, remove otherwise
  • feat: add zizmor to pre-commit

@gforsyth gforsyth added improvement Improves an existing functionality non-breaking Introduces a non-breaking change labels Apr 24, 2026
@gforsyth
gforsyth requested a review from a team as a code owner April 24, 2026 21:03
@gforsyth gforsyth added improvement Improves an existing functionality non-breaking Introduces a non-breaking change labels Apr 24, 2026
@paul-aiyedun
paul-aiyedun merged commit ff44431 into rapidsai:main Apr 24, 2026
5 checks passed
@gforsyth gforsyth mentioned this pull request May 4, 2026
Closed
56 of 57 tasks
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@paul-aiyedun paul-aiyedun paul-aiyedun approved these changes

Assignees

No one assigned

Labels

improvement Improves an existing functionality non-breaking Introduces a non-breaking change

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@gforsyth @paul-aiyedun