mirror of
https://github.com/RustPython/RustPython.git
synced 2026-06-02 19:39:49 +09:00
15 lines
644 B
YAML
15 lines
644 B
YAML
rules:
|
|
unpinned-uses:
|
|
config:
|
|
policies:
|
|
# dtolnay/rust-toolchain is a trusted action that uses lightweight branch
|
|
# refs (@stable, @nightly, etc.) by design. Pinning to a hash would break
|
|
# the intended usage pattern.
|
|
# We can remove this once https://github.com/dtolnay/rust-toolchain/issues/180 is resolved
|
|
dtolnay/rust-toolchain: any
|
|
# dtolnay/rust-toolchain handles component installation, target addition, and
|
|
# override configuration beyond what a bare `rustup` invocation provides.
|
|
# See: https://github.com/zizmorcore/zizmor/issues/1817
|
|
superfluous-actions:
|
|
disable: true
|