Tatsh / smlab / 37187878124

100%

push

github

workflows/*: pass the zizmor pedantic persona

Apply the workflow changes from Wiswa 53caf3f and 5c46700 without a
full regeneration. Every generated job has a name and every workflow
sets concurrency. Check workflows cancel superseded pull request runs,
and build, publish, and release workflows queue their runs. Run scripts
read expression values from environment variables, and permissions are
granted per job. The zizmor config disables the
undocumented-permissions audit.

Only the template changes between Wiswa af7ba8b and 5c46700 are
applied. Other differences from the current template output (tested
Python versions, clang-format trigger paths, action pins, and
hand-written steps) are retained.

The Flatpak workflow pins the freedesktop-26.08 image by digest, and
the manifest runtime-version moves from 24.08 to 26.08 to match it.

Signed-off-by: Andrew Udvare <audvare@gmail.com>

818 of 818 branches covered (100.0%)

Branch coverage included in aggregate %.

3940 of 3940 relevant lines covered (100.0%)

3.0 hits per line