Skip to content

ci: 增加 workflow 安全静态分析 #62

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
Wjavan merged 2 commits into from
Nov 13, 2026
Merged

ci: 增加 workflow 安全静态分析 #62

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
cc8b593
ci: 增加 workflow 安全分析（zizmor）
Wjavan Nov 13, 2026
6118324
Update 网盘直链下载助手.user.js
Wjavan Nov 13, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
3 changes: 3 additions & 0 deletions .github/workflows/ci.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -184,3 +184,6 @@ jobs:
# 校验工具由镜像提供，缺失时直接失败而非跳过
command -v shellcheck >/dev/null || { echo "::error::镜像里没有 shellcheck，workflow 检查不完整"; exit 1; }
"$RUNNER_TEMP/actionlint"

- name: workflow 安全分析
run: pipx run zizmor==1.32.0 --format github .github/workflows
3 changes: 2 additions & 1 deletion .github/workflows/release.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -11,7 +11,7 @@ concurrency:

jobs:
ci:
uses: ./.github/workflows/ci.yml
uses: ./.github/workflows/ci.yml # zizmor: ignore[self-repository]
permissions:
contents: read

Expand All @@ -25,6 +25,7 @@ jobs:
- uses: actions/checkout@v7
with:
fetch-depth: 0
persist-credentials: false

- name: Read @version
id: ver
Expand Down
6 changes: 6 additions & 0 deletions .github/zizmor.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,6 @@
# actions/* 用大版本标签，其余要求哈希。
rules:
unpinned-uses:
config:
policies:
"actions/*": ref-pin
2 changes: 1 addition & 1 deletion 网盘直链下载助手.user.js
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,7 +1,7 @@
// ==UserScript==
// @name FerryLink
// @namespace https://github.com/Wjavan/FerryLink
// @version 1.6.4
// @version 1.6.5
// @author Wjavan
// @description 支持百度/阿里/天翼/迅雷/夸克/移动/城通网盘直链下载。支持 HTTP/JSON-RPC/cURL，推送至 IDM/XDown/Aria2/NDM/Motrix/终端。基于油小猴(youxiaohou.com)的网盘直链下载助手修改。
// @copyright 2026, Wjavan (https://github.com/Wjavan)
Expand Down
Loading