ci: suppress expected zizmor pull_request_target findings

This commit is contained in:
Peter Steinberger 2026-03-13 16:48:34 +00:00
parent 41718404a1
commit 966653e174
2 changed files with 2 additions and 2 deletions

View File

@ -5,7 +5,7 @@ on:
types: [opened, edited, labeled]
issue_comment:
types: [created]
pull_request_target:
pull_request_target: # zizmor: ignore[dangerous-triggers] maintainer-owned label automation; no untrusted checkout or code execution
types: [labeled]
env:

View File

@ -1,7 +1,7 @@
name: Labeler
on:
pull_request_target:
pull_request_target: # zizmor: ignore[dangerous-triggers] maintainer-owned triage workflow; no untrusted checkout or PR code execution
types: [opened, synchronize, reopened]
issues:
types: [opened]