Commit Graph

5 Commits

Author SHA1 Message Date
WT-WSL
462b52f62c fix(ci): guard workflow template injection
Guard the remaining Windows Testbox workflow ref logging against GitHub Actions template injection by moving `target_ref` through step env before PowerShell reads it.

Extend the local workflow check wrapper to run pinned `zizmor` across every workflow file, and keep Workflow Sanity's CI audit explicit with trusted-base pre-commit and zizmor configs for pull-request runs.

Thanks @WT-WSL for the original report and patch.

Co-authored-by: dev111-actor <captaintobb@outlook.com>
2026-05-31 20:28:40 +01:00
Vincent Koc
32b4d1ec8a ci: expand Windows WSL probe runners 2026-05-03 21:32:35 -07:00
Vincent Koc
b2f0f67e0d ci: support Ubuntu import in Windows WSL probe 2026-05-03 21:28:22 -07:00
Vincent Koc
90d25d59c6 ci: keep Windows probe alive after WSL check 2026-05-03 21:19:48 -07:00
Vincent Koc
9dc3271efb ci: add Windows testbox probe 2026-05-03 21:17:49 -07:00