Compare commits

..

4 Commits

Author SHA1 Message Date
22d72e8a34 Restrict workflow permissions to contents: read
All checks were successful
CI / backend-lint (pull_request) Successful in 9s
CI / actions-lint (pull_request) Successful in 15s
CI / frontend-lint (pull_request) Successful in 20s
All CI jobs and the deploy workflow only need to read repo contents.
Adding explicit top-level permissions satisfies zizmor's
excessive-permissions audit.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-02-17 19:34:07 +01:00
2675491216 Fix zizmor PATH issue in CI by using pipx run
Some checks failed
CI / backend-lint (pull_request) Successful in 9s
CI / actions-lint (pull_request) Failing after 15s
CI / frontend-lint (pull_request) Successful in 20s
pipx run executes directly without needing the binary on PATH.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-02-17 19:31:39 +01:00
e9100fa826 Fix zizmor install in CI by using pipx
Some checks failed
CI / backend-lint (pull_request) Successful in 9s
CI / actions-lint (pull_request) Failing after 15s
CI / frontend-lint (pull_request) Successful in 20s
Bare pip install fails on newer Ubuntu runners due to PEP 668
(externally-managed-environment). Use pipx which is pre-installed.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-02-17 19:28:24 +01:00
acfe767214 Fix actionlint install in CI workflow
Some checks failed
CI / backend-lint (pull_request) Successful in 9s
CI / actions-lint (pull_request) Failing after 8s
CI / frontend-lint (pull_request) Successful in 20s
The download URL was missing the version number in the asset filename.
Use the official download script which handles version resolution.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-02-17 19:19:11 +01:00

Diff Content Not Available