lint github actions using zizmor

codeformuenster · Jan 20, 2025 · 0db86bd · 0db86bd
1 parent cf94f05
commit 0db86bd
Show file tree

Hide file tree

Showing 2 changed files with 15 additions and 6 deletions.
diff --git a/.github/workflows/build-pr.yml b/.github/workflows/build-pr.yml
@@ -1,16 +1,20 @@
 name: build-prs
 
+permissions: {}
+
 on: pull_request
 jobs:
   build:
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     steps:
     - uses: actions/checkout@v4
+      with:
+        persist-credentials: false
 
-    - name: Set up Go 1.22
+    - name: Set up Go 1.23
       uses: actions/setup-go@v5
       with:
-        go-version: "1.22"
+        go-version: "1.23"
         check-latest: true
         cache: true
 

diff --git a/.github/workflows/tweet-datasets.yml b/.github/workflows/tweet-datasets.yml
@@ -7,16 +7,21 @@ on:
   schedule:
     - cron: '0 16-21/2 * * *'
   workflow_dispatch: {}
+
+permissions: {}
+
 jobs:
   scrape-and-tweet:
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     steps:
     - uses: actions/checkout@v4
+      with:
+        persist-credentials: false
 
-    - name: Set up Go 1.22
+    - name: Set up Go 1.23
       uses: actions/setup-go@v5
       with:
-        go-version: "1.22"
+        go-version: "1.23"
         check-latest: true
         cache: true