mirror of
https://github.com/samsonjs/immich.git
synced 2026-03-25 09:15:56 +00:00
504930947d
* fix: set persist-credentials explicitly for checkout https://woodruffw.github.io/zizmor/audits/#artipacked * fix: minimize permissions scope for workflows https://woodruffw.github.io/zizmor/audits/#excessive-permissions * fix: remove potential template injections https://woodruffw.github.io/zizmor/audits/#template-injection * fix: only pass needed secrets in workflow_call https://woodruffw.github.io/zizmor/audits/#secrets-inherit * fix: push perm for single-arch build jobs I hadn't realised these push to the registry too :x * chore: fix formatting * fix: $ * fix: retag job quoting --------- Co-authored-by: github-actions <41898282+github-actions[bot]@users.noreply.github.com> |
||
|---|---|---|
| .. | ||
| build-mobile.yml | ||
| cache-cleanup.yml | ||
| cli.yml | ||
| codeql-analysis.yml | ||
| docker.yml | ||
| docs-build.yml | ||
| docs-deploy.yml | ||
| docs-destroy.yml | ||
| fix-format.yml | ||
| pr-label-validation.yml | ||
| pr-labeler.yml | ||
| pr-require-conventional-commit.yml | ||
| prepare-release.yml | ||
| preview-label.yaml | ||
| sdk.yml | ||
| static_analysis.yml | ||
| test.yml | ||
| weblate-lock.yml | ||