Files
termscp/.github/workflows/install.yml
Christian Visintin cdd4c60805 ci: pin all actions to verified SHAs and clear zizmor findings
Pin every action to a commit SHA whose tag comment matches (verified via gh api),
add least-privilege permissions, set persist-credentials: false, and replace the
archived actions-rs/cargo with a plain cargo test. zizmor clean at default persona.
2026-06-07 16:58:51 +02:00

33 lines
560 B
YAML

name: Install.sh
on:
push:
branches: [main]
tags:
- "v*"
env:
CARGO_TERM_COLOR: always
permissions:
contents: read
jobs:
build:
strategy:
matrix:
os:
- ubuntu-latest
- macos-latest
runs-on: ${{ matrix.os }}
steps:
- uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
with:
persist-credentials: false
- name: Install termscp from script
run: |
./install.sh -f
which termscp || exit 1
termscp --version