Repository navigation

Harden GitHub Actions workflows - #173

Merged

yfyf merged 5 commits into

dividat:mainfrom

knuton:harden-gh-actions

May 22, 2026

Commits on May 20, 2026
- Remove magic-nix-cache from release workflow
  knuton
  committed
  0da8e1f
- Default permissions to read and only heighten where needed
  knuton
  committed
  db42758
- Use env variables instead of string interpolation
  knuton
  committed
  36449b1
- Override default to not persist creds in actions/checkout
  knuton
  committed
  603dbf7
- Add zizmor GH Actions analysis workflow
  knuton
  committed
  750ff43