Add zizmor and frizbee CI/CD security checks#290

Merged

tashian merged 10 commits intomainfrom

carl/add-zizmor-frizbee

Mar 3, 2026

Commits on Mar 3, 2026

Add zizmor and frizbee CI/CD security checks

tashian
and
claude
committed
Restrict permissions on zizmor and frizbee caller jobs

tashian
and
claude
committed
Fix zizmor security findings and add suppression config

tashian
and
claude
committed
Add comments to zizmor suppression config

tashian
and
claude
committed
Fix frizbee-action: pass GITHUB_TOKEN and use correct inputs

tashian
and
claude
committed
Pin unpinned actions and normalize Docker image refs for frizbee

tashian
and
claude
committed
Switch frizbee workflow to CLI instead of Docker action

tashian
and
claude
committed
Use local file ref in code-scan.yml instead of smallstep/workflows@main

tashian
and
claude
committed
Remove stale unpinned-uses ignores from zizmor config

tashian
and
claude
committed
Add explicit permissions blocks, eliminate all zizmor ignores

tashian
and
claude
committed