From f36173ac16851c36a630dcdf721e1a0c7f00692c Mon Sep 17 00:00:00 2001
From: Claude <noreply@anthropic.com>
Date: Tue, 6 Oct 2026 00:55:09 +0000
Subject: [PATCH] ci: use the shared zizmor and YAML extension check

Calls shared-lint from femiwiki/.github in the required workflow and drops this repository's copies and zizmor config.

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01LwJvA2crZ3dmxYB2SDQvgU
---
 .github/workflows/lint.yml     | 31 -------------------------------
 .github/workflows/required.yml |  7 ++++++-
 .github/zizmor.yml             |  9 ---------
 3 files changed, 6 insertions(+), 41 deletions(-)
 delete mode 100644 .github/zizmor.yml

diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml
index 736aff0..fe8f50f 100644
--- a/.github/workflows/lint.yml
+++ b/.github/workflows/lint.yml
@@ -34,34 +34,3 @@ jobs:
         with:
           dry: true
           prettier_options: --check **/*.{md,yaml,yml}
-
-  zizmor:
-    runs-on: ubuntu-latest
-    permissions:
-      contents: read
-    steps:
-      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
-        with:
-          persist-credentials: false
-
-      - uses: zizmorcore/zizmor-action@cc914d7f3750a2d13d75c7f184a1060aa0e9d482 # v0.6.4
-        with:
-          advanced-security: false
-
-  extensions:
-    runs-on: ubuntu-latest
-    timeout-minutes: 5
-    permissions:
-      contents: read
-    steps:
-      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
-        with:
-          persist-credentials: false
-
-      - name: GitHub Actions files end in .yml, other YAML files in .yaml
-        run: |
-          wrong=$(
-            git ls-files '.github/*.yaml' 'action.yaml' '*/action.yaml'
-            git ls-files '*.yml' ':!.github/*' ':!action.yml' ':!*/action.yml'
-          )
-          if [ -n "$wrong" ]; then echo "$wrong"; exit 1; fi
diff --git a/.github/workflows/required.yml b/.github/workflows/required.yml
index 8b16360..a37c548 100644
--- a/.github/workflows/required.yml
+++ b/.github/workflows/required.yml
@@ -16,10 +16,15 @@ jobs:
     permissions:
       contents: read
 
+  shared-lint:
+    uses: femiwiki/.github/.github/workflows/shared-lint.yml@243836c393e62e7887baad11dd1619dcc1bb0fac
+    permissions:
+      contents: read
+
   # The one check branch protection requires. What has to pass is the
   # workflows called above, so adding a check does not touch femiwiki/infra.
   required:
-    needs: [lint, test]
+    needs: [lint, test, shared-lint]
     if: always()
     runs-on: ubuntu-latest
     timeout-minutes: 5
diff --git a/.github/zizmor.yml b/.github/zizmor.yml
deleted file mode 100644
index 5f94896..0000000
--- a/.github/zizmor.yml
+++ /dev/null
@@ -1,9 +0,0 @@
----
-rules:
-  unpinned-uses:
-    config:
-      policies:
-        '*': hash-pin
-  # actionlint rejects the `$/` syntax this asks for: https://github.com/rhysd/actionlint/issues/711
-  self-repository:
-    disable: true