Add zizmor CI by ShaharNaveh · Pull Request #7463 · RustPython/RustPython

ShaharNaveh

Note

Reviews paused

It looks like this branch is under active development. To avoid overwhelming you with review comments due to an influx of new commits, CodeRabbit has automatically paused this review. You can configure this behavior by changing the reviews.auto_review.auto_pause_after_reviewed_commits setting.

Use the following commands to manage reviews:

@coderabbitai resume to resume automatic reviews.
@coderabbitai review to trigger a single review.

Use the checkboxes below for quick actions:

▶️ Resume reviews
🔍 Trigger review

📝 Walkthrough

Walkthrough

A new security-lint CI job was added to the GitHub Actions workflow to run security linting checks using the zizmor-action. The job executes on ubuntu-latest with security-events write permissions and performs code checkout with disabled credential persistence.

Changes

Cohort / File(s)	Summary
GitHub Actions Workflow `.github/workflows/ci.yaml`	Added `security-lint` job that runs zizmor security linting on ubuntu-latest with security-events write permissions. Includes checkout step with persist-credentials disabled and zizmor-action@v0.4.1 execution.

Estimated code review effort

🎯 2 (Simple) | ⏱️ ~10 minutes

Suggested reviewers

youknowone

Poem

🐰 A rabbit hops through CI flows so bright,
Security checks now running each night,
With zizmor's keen eye and permissions set right,
The workflow grows stronger, securing the site! ✨

🚥 Pre-merge checks | ✅ 3

✅ Passed checks (3 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title 'Add zizmor CI' is concise and directly related to the main change—adding a security-lint job using the zizmor-action to the CI workflow.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

✨ Finishing Touches

🧪 Generate unit tests (beta)

Create PR with unit tests

📝 Coding Plan

Generate coding plan for human review comments

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

_{Comment @coderabbitai help to get the list of available commands and usage tips.}