admin/trailofbits-claude-code-config
1
0
Fork 0
mirror of https://github.com/trailofbits/claude-code-config synced 2026-06-21 14:11:43 +00:00
Code Issues Packages Projects Releases Wiki Activity

Update GitHub Actions guidelines for Python projects

Browse Source 
Added recommendation to use 'uv' ecosystem for Python projects in GitHub Actions section.
This commit is contained in:
Dan Guido
2026-02-16 17:20:17 -07:00
committed by GitHub
parent 40b70ea27e
commit a6e1bc7c47
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
claude-md-template.md
+1 -1
View File
@@ -182,7 +182,7 @@ All scripts must start with `set -euo pipefail`. Lint: `shellcheck script.sh &&
### GitHub Actions
Pin actions to SHA hashes with version comments: `actions/checkout@<full-sha> # vX.Y.Z` (use `persist-credentials: false`). Scan workflows with `zizmor` before committing. Configure Dependabot with 7-day cooldowns and grouped updates.
Pin actions to SHA hashes with version comments: `actions/checkout@<full-sha> # vX.Y.Z` (use `persist-credentials: false`). Scan workflows with `zizmor` before committing. Configure Dependabot with 7-day cooldowns and grouped updates. Use `uv` ecosystem (not `pip`) for Python projects so Dependabot updates `uv.lock`.
## Workflow