Cornelicorn/oh-my-zsh
1
0
Fork 0
mirror of https://github.com/robbyrussell/oh-my-zsh.git synced 2026-01-31 22:50:21 +01:00
Code Issues Releases Wiki Activity

[StepSecurity] Apply security best practices (#89) 

Signed-off-by: StepSecurity Bot <bot@stepsecurity.io>
StepSecurity Bot
2026-01-14 10:42:09 -08:00
committed by GitHub
parent 57e063c711
commit 1ed256ce2b
2 changed files with 12 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
.github/dependabot.yml vendored Normal file

@@ -0,0 +1,6 @@
version: 2
updates:
- package-ecosystem: github-actions
directory: /
schedule:
interval: daily

7
.github/workflows/publish.yml vendored

@@ -16,7 +16,12 @@ jobs:
publish: publish:
runs-on: ubuntu-latest runs-on: ubuntu-latest
steps: steps:
- uses: actions/checkout@v4 - name: Harden the runner (Audit all outbound calls)
uses: step-security/harden-runner@20cf305ff2072d973412fa9b1e3a4f227bda3c76 # v2.14.0
with:
egress-policy: audit
- uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
with: with:
ref: main ref: main
fetch-depth: 0 fetch-depth: 0