humanspeak / svelte-json-view-lite / 34728947671

87%

push

github

ci: run zizmor through trunk, drop the custom validate-workflows harness (#41)

The `validate-workflows` job installed the latest zizmor from PyPI on
every run, so a new upstream audit could turn CI red with no change in
the repo -- which is exactly what zizmor 1.30.0's `self-repository`
audit did fleet-wide.

zizmor now runs as a pinned trunk linter (1.30.0), so future audit
additions arrive through a deliberate version bump instead of a
surprise red build. actionlint is disabled because its latest release
(1.7.12) rejects the `$/` self-repository form that zizmor asks for;
GitHub's runner is the authority there, not the linter.

Co-authored-by: Claude Opus 5 <noreply@anthropic.com>

171 of 225 branches covered (76.0%)

Branch coverage included in aggregate %.

238 of 247 relevant lines covered (96.36%)

229.95 hits per line