github: scope/narrow permissions, prevent template injection via GHA, enable zizmor workflow #40
thoughtpoliceci.yml
on: pull_request
build (no git)
1m 15s
check (protos)
28s
check (rustfmt)
20s
check (clippy)
2m 42s
check (codespell)
9s
check (doctests)
2m 34s
check (mkdocs)
9s
check (latest mkdocs, optional)
11s
Matrix: nix flake
Matrix: check-cargo-deny
Matrix: test