Skip to content

ci: retire zizmor in favour of jactionlint - #72

Merged
robinbowes merged 1 commit into
mainfrom
ci/retire-zizmor
Oct 17, 2026
Merged

robinbowes merged 1 commit into
mainfrom
ci/retire-zizmor

Conversation

@robinbowes

Copy link
Copy Markdown
Collaborator

Retires zizmor per yo61/global decisions/2026-10-17-retire-zizmor.md (GLB-51).

  • Removes the zizmor pre-commit hook (zizmor-pre-commit v1.30.1).
  • Removes the standalone zizmor CI job and the lint job's SKIP: zizmor. The ruleset no longer requires a zizmor check (GLB-52); required checks are now commitlint and test.
  • The lint job's prek step sets JACTIONLINT_ONLINE: 1 and GITHUB_TOKEN: ${{ github.token }}, so jactionlint runs its online rules in CI. The lint job has contents: read only.
  • README's CI section and the "Why CI is shaped this way" docs page no longer describe the zizmor job (five jobs, not six).

No # zizmor: ignore[...] comments existed (jactionlint --migrate-ignores changed nothing). jactionlint --online locally: no findings.

As a template, repositories generated from it after this merge get no zizmor hook or job.

GLB-53

🤖 Generated with Claude Code

Drop the zizmor pre-commit hook, the standalone zizmor CI job and the
lint job's SKIP: zizmor. The lint job's prek step now sets
JACTIONLINT_ONLINE and GITHUB_TOKEN so jactionlint runs its online
rules in CI. The ruleset no longer requires a zizmor check (GLB-52).

README and the CI-shape explanation page no longer describe the zizmor
job.

Refs: GLB-53

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
@robinbowes
robinbowes merged commit ec02acf into main Oct 17, 2026
11 checks passed
@robinbowes
robinbowes deleted the ci/retire-zizmor branch October 17, 2026 12:11
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant