From 072a34d64804081aa4694732b3edfdfce4009f4f Mon Sep 17 00:00:00 2001 From: Sebastiaan van Stijn Date: Thu, 4 Jun 2026 11:06:24 +0200 Subject: [PATCH] gha: suppress zizmor warning for intentionally un-pinned workflows Signed-off-by: Sebastiaan van Stijn --- .github/workflows/windows-hyperv-periodic-trigger.yml | 2 +- .github/workflows/windows-periodic-trigger.yml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/windows-hyperv-periodic-trigger.yml b/.github/workflows/windows-hyperv-periodic-trigger.yml index 4c5f3ac793..be7f95021d 100644 --- a/.github/workflows/windows-hyperv-periodic-trigger.yml +++ b/.github/workflows/windows-hyperv-periodic-trigger.yml @@ -22,7 +22,7 @@ jobs: # upstream containerd repository should be replaced with the following to # potentially allow contributors to enable periodic Windows tests on forks as well: # uses: "${{ github.repository }}/.github/workflows/windows-hyperv-periodic.yml@${{ github.ref_name }}" - uses: containerd/containerd/.github/workflows/windows-hyperv-periodic.yml@main + uses: containerd/containerd/.github/workflows/windows-hyperv-periodic.yml@main # zizmor: ignore[unpinned-uses] reusable workflow intentionally tracks containerd/main secrets: AZURE_SUB_ID: "${{ secrets.AZURE_SUB_ID }}" AZURE_CREDS: "${{ secrets.AZURE_CREDS }}" diff --git a/.github/workflows/windows-periodic-trigger.yml b/.github/workflows/windows-periodic-trigger.yml index 1b1664f3fa..5881dd4465 100644 --- a/.github/workflows/windows-periodic-trigger.yml +++ b/.github/workflows/windows-periodic-trigger.yml @@ -22,7 +22,7 @@ jobs: # upstream containerd repository should be replaced with the following to # potentially allow contributors to enable periodic Windows tests on forks as well: # uses: "${{ github.repository }}/.github/workflows/windows-periodic.yml@${{ github.ref_name }}" - uses: containerd/containerd/.github/workflows/windows-periodic.yml@main + uses: containerd/containerd/.github/workflows/windows-periodic.yml@main # zizmor: ignore[unpinned-uses] reusable workflow intentionally tracks containerd/main secrets: AZURE_SUB_ID: "${{ secrets.AZURE_SUB_ID }}" AZURE_CREDS: "${{ secrets.AZURE_CREDS }}"