fix: refresh outbound HTTPS trust and installer bootstrap

2026-10-22 23:02:23 +02:00 · 2026-10-21 18:27:05 +00:00
parent 8877273e19
commit df1c2c8b19
14 changed files with 355 additions and 9 deletions
@@ -76,5 +76,9 @@ jobs:
      - name: Run zizmor
        run: |
          set -euo pipefail
+          sudo apt-get update
+          sudo apt-get install -y --no-install-recommends ca-certificates
+          python scripts/check_ca_trust.py --system
+          python -m pip install --require-hashes --only-binary=:all: --no-deps -r requirements-bootstrap.txt
          pip install zizmor==1.25.2
          zizmor --offline --min-severity=low .github/workflows/