Repository navigation
ci: enforce workflow security checks - #456
Merged
Merged
Claude / Claude Code Review
completed
Oct 21, 2026 in 6m 44s
Code review found 2 potential issues
Found 7 candidates, confirmed 2. See review comments for details.
Details
| Severity | Count |
|---|---|
| 🔴 Important | 0 |
| 🟡 Nit | 1 |
| 🟣 Pre-existing | 1 |
| Severity | File:Line | Issue |
|---|---|---|
| 🟡 Nit | .github/workflows/zizmor.yml:45 |
A new zizmor release could start blocking workflow PRs and pushes to main even when the workflow files did not change. T |
| 🟣 Pre-existing | .github/workflows/trunk-upgrade.yml:43 |
pre-existing: Scheduled trunk upgrades still get an empty token, so the newly pinned and re-permissioned upgrade job can |
Loading