7 ms·Thanks for making me aware of zizmor, just ran and fixed all issues on our core repos.by robbiet480 4mo agoThanks for making me aware of zizmor, just ran and fixed all issues on our core repos.vldszn 4mo agoYou are welcome! Recently discovered it and found it genuinely useful. Fixed a bunch of issues in my workflows too :)bodash 4mo agofew more tips here: https://github.com/bodadotsh/npm-security-best-practices https://github.com/bodadotsh/npm-security-best-practices