From 221d5f85ee602e42385a1735ad2fa6b52a05527b Mon Sep 17 00:00:00 2001 From: hashcatHitman <155700084+hashcatHitman@users.noreply.github.com> Date: Thu, 8 Oct 2026 14:14:52 +0000 Subject: [PATCH 1/3] ops(cc-rs): Opt in to `ref-version-mismatch` Signed-off-by: hashcatHitman <155700084+hashcatHitman@users.noreply.github.com> --- zizmor-policy.yml | 2 ++ 1 file changed, 2 insertions(+) diff --git a/zizmor-policy.yml b/zizmor-policy.yml index 6ce69b5..f42398d 100644 --- a/zizmor-policy.yml +++ b/zizmor-policy.yml @@ -154,6 +154,8 @@ repositories: github-env: # TODO disable: true + ref-version-mismatch: + disable: false rust-lang/odht: rules: obfuscation: From 30e4815898646f6f8edb8543f7ebf8c20cadc7ab Mon Sep 17 00:00:00 2001 From: hashcatHitman <155700084+hashcatHitman@users.noreply.github.com> Date: Thu, 8 Oct 2026 14:15:38 +0000 Subject: [PATCH 2/3] ops(cc-rs): Opt in to `stale-action-refs` Signed-off-by: hashcatHitman <155700084+hashcatHitman@users.noreply.github.com> --- zizmor-policy.yml | 2 ++ 1 file changed, 2 insertions(+) diff --git a/zizmor-policy.yml b/zizmor-policy.yml index f42398d..2eaf440 100644 --- a/zizmor-policy.yml +++ b/zizmor-policy.yml @@ -156,6 +156,8 @@ repositories: disable: true ref-version-mismatch: disable: false + stale-action-refs: + disable: false rust-lang/odht: rules: obfuscation: From 163225d97ac1bc58e39de521c90f212e8b97405a Mon Sep 17 00:00:00 2001 From: hashcatHitman <155700084+hashcatHitman@users.noreply.github.com> Date: Thu, 8 Oct 2026 14:16:32 +0000 Subject: [PATCH 3/3] ops(cc-rs): Opt in to `unpinned-uses` Signed-off-by: hashcatHitman <155700084+hashcatHitman@users.noreply.github.com> --- zizmor-policy.yml | 2 ++ 1 file changed, 2 insertions(+) diff --git a/zizmor-policy.yml b/zizmor-policy.yml index 2eaf440..4f4ed2d 100644 --- a/zizmor-policy.yml +++ b/zizmor-policy.yml @@ -158,6 +158,8 @@ repositories: disable: false stale-action-refs: disable: false + unpinned-uses: + disable: false rust-lang/odht: rules: obfuscation: