Zizmor, Linting, documentation - #738

Merged

ewjoachim merged 14 commits into

mainfrom

persist-credentials-and-workflow-lint

Aug 9, 2026

Commits on Aug 9, 2026

fix(ci): stop requesting contents: write when only posting comments

ewjoachim
and
claude
committed
41fde63
ci: move the e2e tokens into a dedicated environment

ewjoachim
and
claude
committed
ce3be58
ci: stop publishing the base image to Docker Hub

ewjoachim
and
claude
committed
038231c
ci: document permissions, name jobs, and add concurrency groups

ewjoachim
and
claude
committed
39ff776
docs: extract the workflow examples into docs/examples/

ewjoachim
and
claude
committed
fff43b6
docs: explain when persist-credentials: false became safe

ewjoachim
and
claude
committed
afa862b
chore: run zizmor with the auditor persona

ewjoachim
and
claude
committed
3baf05e
ci: quote shell variables in workflow run blocks

ewjoachim
and
claude
committed
15c7094
chore: lint workflows with actionlint

ewjoachim
and
claude
committed
88adb07
docs: document USE_GH_PAGES_HTML_URL

ewjoachim
and
claude
committed
f7bf75b
chore: check that action.yml and the docs agree on the inputs

ewjoachim
and
claude
committed
a5a7a09
ci: keep the e2e tokens available to ci.yml

ewjoachim
and
claude
committed
c64623c
ci: run the end-to-end tests in their own job

ewjoachim
and
claude
committed
1c01767
ci: link the e2e repositories from the deployment

ewjoachim
and
claude
committed
89461f2