@@ -19,6 +19,32 @@ rules:
19
19
octokit/* : ref-pin
20
20
slackapi/* : ref-pin
21
21
22
+ ref-confusion :
23
+ # todo(mm, 2025-06-24):
24
+ # codecov/codecov-action@v3 the branch overlaps with codecov/codecov-action@v3 the
25
+ # tag. For some reason, I can only ignore that violation globally here, not locally
26
+ # with `# zizmor: ignore` comments. We should upgrade to one of the newer
27
+ # codecov-action refs, which do not have the overlapping problem, and then remove
28
+ # these overrides.
29
+ ignore :
30
+ - hardware-testing.yaml
31
+ - opentrons-ai-client-test.yaml
32
+ - app-test-build-deploy.yaml
33
+ - shared-data-test-lint-deploy.yaml
34
+ - server-utils-lint-test.yaml
35
+ - g-code-testing-lint-test.yaml
36
+ - hardware-lint-test.yaml
37
+ - robot-server-lint-test.yaml
38
+ - system-server-lint-test.yaml
39
+ - step-generation-test.yaml
40
+ - ll-test-build-deploy.yaml
41
+ - usb-bridge-lint-test.yaml
42
+ - components-test-build-deploy.yaml
43
+ - pd-test-build-deploy.yaml
44
+ - react-api-client-test.yaml
45
+ - update-server-lint-test.yaml
46
+ - api-test-lint-deploy.yaml
47
+
22
48
excessive-permissions :
23
49
# todo(mm, 2025-06-24): These workflows leave their permissions at the default, which is usually way broader than what we need.
24
50
# https://docs.github.com/en/actions/security-for-github-actions/security-guides/automatic-token-authentication#permissions-for-the-github_token
0 commit comments