From 902ce17c4f769813f0d761e87bb9ba85fd5815be Mon Sep 17 00:00:00 2001 From: Floris Bruynooghe Date: Thu, 1 Oct 2026 17:36:04 +0200 Subject: [PATCH] chore(ci): Use safer self-repo syntax This is harder to abuse by previous steps. See https://docs.zizmor.sh/audits/#self-repository for full motivation. --- .github/workflows/beta.yaml | 2 +- .github/workflows/flaky.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/beta.yaml b/.github/workflows/beta.yaml index d238c6dc..c4448348 100644 --- a/.github/workflows/beta.yaml +++ b/.github/workflows/beta.yaml @@ -21,7 +21,7 @@ permissions: jobs: tests: - uses: './.github/workflows/tests.yaml' + uses: '$/.github/workflows/tests.yaml' with: rust-version: beta notify: diff --git a/.github/workflows/flaky.yaml b/.github/workflows/flaky.yaml index aa96c3d6..eece255d 100644 --- a/.github/workflows/flaky.yaml +++ b/.github/workflows/flaky.yaml @@ -47,7 +47,7 @@ permissions: jobs: tests: if: "contains(github.event.pull_request.labels.*.name, 'flaky-test') || github.event_name == 'workflow_dispatch' || github.event_name == 'schedule'" - uses: './.github/workflows/tests.yaml' + uses: '$/.github/workflows/tests.yaml' with: flaky: true git-ref: ${{ inputs.branch }}