codex

mirror of https://github.com/openai/codex.git synced 2026-04-30 19:32:04 +03:00

Files

viyatb-oai a3613035f3 Pin setup-zig GitHub Action to immutable SHA (#14858 )

### Motivation
- Pinning the action to an immutable commit SHA reduces the risk of
arbitrary code execution in runners with repository access and secrets.

### Description
- Replaced `uses: mlugg/setup-zig@v2` with `uses:
mlugg/setup-zig@d1434d0886 # v2` in three
workflow files.
- Updated the following files: ` .github/workflows/rust-ci.yml`, `
.github/workflows/rust-release.yml`, and `
.github/workflows/shell-tool-mcp.yml` to reference the immutable SHA
while preserving the original `v2` intent in a trailing comment.

### Testing
- No automated tests were run because this is a workflow-only change and
does not affect repository source code, so CI validation will occur on
the next workflow execution.

------
[Codex
Task](https://chatgpt.com/codex/tasks/task_i_69763f570234832d9c67b1b66a27c78d)

2026-03-17 22:40:14 -07:00

bazel.yml

fix: disable Bazel builds in CI on ubuntu-24.04-arm until we can stabilize them (#13055 )

2026-02-27 12:49:13 -08:00

blob-size-policy.yml

fix: tighten up shell arg quoting in GitHub workflows (#14864 )

2026-03-16 22:01:16 -07:00

cargo-deny.yml

bump cargo-deny-action ver (#8345 )

2025-12-19 15:23:02 -08:00

ci.bazelrc

[bazel] Upgrade some rulesets in preparation for enabling windows, part 2 (#11197 )