diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml index 736aff0..fe8f50f 100644 --- a/.github/workflows/lint.yml +++ b/.github/workflows/lint.yml @@ -34,34 +34,3 @@ jobs: with: dry: true prettier_options: --check **/*.{md,yaml,yml} - - zizmor: - runs-on: ubuntu-latest - permissions: - contents: read - steps: - - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 - with: - persist-credentials: false - - - uses: zizmorcore/zizmor-action@cc914d7f3750a2d13d75c7f184a1060aa0e9d482 # v0.6.4 - with: - advanced-security: false - - extensions: - runs-on: ubuntu-latest - timeout-minutes: 5 - permissions: - contents: read - steps: - - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 - with: - persist-credentials: false - - - name: GitHub Actions files end in .yml, other YAML files in .yaml - run: | - wrong=$( - git ls-files '.github/*.yaml' 'action.yaml' '*/action.yaml' - git ls-files '*.yml' ':!.github/*' ':!action.yml' ':!*/action.yml' - ) - if [ -n "$wrong" ]; then echo "$wrong"; exit 1; fi diff --git a/.github/workflows/required.yml b/.github/workflows/required.yml index 6277310..8f48136 100644 --- a/.github/workflows/required.yml +++ b/.github/workflows/required.yml @@ -21,10 +21,15 @@ jobs: permissions: contents: read + shared-lint: + uses: femiwiki/.github/.github/workflows/shared-lint.yml@243836c393e62e7887baad11dd1619dcc1bb0fac + permissions: + contents: read + # The one check branch protection requires. What has to pass is the # workflows called above, so adding a check does not touch femiwiki/infra. required: - needs: [lint, test, long-comments] + needs: [lint, test, long-comments, shared-lint] if: always() runs-on: ubuntu-latest timeout-minutes: 5 diff --git a/.github/zizmor.yml b/.github/zizmor.yml deleted file mode 100644 index 5f94896..0000000 --- a/.github/zizmor.yml +++ /dev/null @@ -1,9 +0,0 @@ ---- -rules: - unpinned-uses: - config: - policies: - '*': hash-pin - # actionlint rejects the `$/` syntax this asks for: https://github.com/rhysd/actionlint/issues/711 - self-repository: - disable: true