# Configuration for the zizmor static analysis tool, run via pre-commit in CI
# https://woodruffw.github.io/zizmor/configuration/
rules:
  unpinned-uses:
    config:
      policies:
        "*": ref-pin