https://raw.githubusercontent.com/python/cpython-devcontainers/refs/heads/main/.github/zizmor.yml

# Configuration for the zizmor static analysis tool, run via prek in CI # https://woodruffw.github.io/zizmor/configuration/ rules: template-injection: ignore: - build-and-push.yml:108 unpinned-uses: config: policies: "*": ref-pin