Files
openproject/.github/zizmor.yml
2026-05-06 11:04:47 +02:00

17 lines
578 B
YAML

rules:
artipacked:
ignore:
# These workflows intentionally persist credentials because they push commits/branches
- create-merge-from-previous-release-branch-pr.yml
- create-merge-release-into-dev-pr.yml
- crowdin.yml
- sync-internal-fork.yml
dangerous-triggers:
ignore:
# CLA workflow intentionally uses pull_request_target to handle outside contributors
- cla.yml
cache-poisoning:
ignore:
# Frontend unit tests cache npm packages; only triggered on push/PR from trusted branches
- test-frontend-unit.yml