From ea1e0f329ac5438f39963db098dbf7e2705bc61f Mon Sep 17 00:00:00 2001
From: 030 <chocolatey030@gmail.com>
Date: Sun, 9 Aug 2026 14:11:59 +0200
Subject: [PATCH] build(fix): general action instead of redundant zizmor

---
 .github/workflows/mcvs-general-action.yml | 24 +++++++++++++++++++++++
 .github/workflows/mcvs-pr-validation.yml  |  1 +
 .github/workflows/python.yml              |  5 +++--
 .github/workflows/zizmor.yml              | 24 -----------------------
 action.yml                                |  7 ++++---
 5 files changed, 32 insertions(+), 29 deletions(-)
 create mode 100644 .github/workflows/mcvs-general-action.yml
 delete mode 100644 .github/workflows/zizmor.yml

diff --git a/.github/workflows/mcvs-general-action.yml b/.github/workflows/mcvs-general-action.yml
new file mode 100644
index 0000000..a82a0f2
--- /dev/null
+++ b/.github/workflows/mcvs-general-action.yml
@@ -0,0 +1,24 @@
+---
+name: general
+"on": pull_request
+permissions:
+  contents: read
+  packages: read
+jobs:
+  mcvs-general-action:
+    strategy:
+      matrix:
+        args:
+          - testing-type: lint-action
+          - testing-type: lint-commit
+          - testing-type: lint-git
+          - testing-type: yamllint
+    runs-on: ubuntu-24.04
+    steps:
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+        with:
+          persist-credentials: false
+      # yamllint disable rule:line-length
+      - uses: schubergphilis/mcvs-general-action@03b7d82ed321d30353707237ce1d95a65899548c # v0.6.2
+        with:
+          testing-type: ${{ matrix.args.testing-type }}
diff --git a/.github/workflows/mcvs-pr-validation.yml b/.github/workflows/mcvs-pr-validation.yml
index a2af013..0414f56 100644
--- a/.github/workflows/mcvs-pr-validation.yml
+++ b/.github/workflows/mcvs-pr-validation.yml
@@ -18,4 +18,5 @@ jobs:
       - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           persist-credentials: false
+      # yamllint disable rule:line-length
       - uses: schubergphilis/mcvs-pr-validation-action@6f153c01301ab2f92336781173b7f3a796de5f3e # v0.2.2
diff --git a/.github/workflows/python.yml b/.github/workflows/python.yml
index 83bd7d7..c3391e1 100644
--- a/.github/workflows/python.yml
+++ b/.github/workflows/python.yml
@@ -10,10 +10,11 @@ jobs:
       - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           persist-credentials: false
+      # yamllint disable rule:line-length
       - uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0
         with:
-          python-version-file: "pyproject.toml"
-          cache: "pip"
+          python-version-file: pyproject.toml
+          cache: pip
       - name: Install development packages as defined in pyproject.toml
         run: |
           pip install .[dev]
diff --git a/.github/workflows/zizmor.yml b/.github/workflows/zizmor.yml
deleted file mode 100644
index bfd7218..0000000
--- a/.github/workflows/zizmor.yml
+++ /dev/null
@@ -1,24 +0,0 @@
----
-# copied from https://github.com/zizmorcore/zizmor-action#usage-with-github-advanced-security-recommended
-# and slightly modified
-name: GitHub Actions Security Analysis with zizmor 🌈
-"on":
-  pull_request:
-permissions:
-  contents: read
-jobs:
-  zizmor:
-    runs-on: ubuntu-24.04
-    permissions:
-      security-events: write
-      contents: read # only needed for private or internal repos
-      actions: read # only needed for private or internal repos
-    steps:
-      - name: Checkout repository
-        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
-        with:
-          persist-credentials: false
-      - name: Run zizmor 🌈
-        uses: zizmorcore/zizmor-action@6fc4b006235f201fdab3722e17240ab420d580e5 # v0.6.1
-        with:
-          minimum-severity: low
diff --git a/action.yml b/action.yml
index 02e6301..3f9cb64 100644
--- a/action.yml
+++ b/action.yml
@@ -1,3 +1,4 @@
+# yamllint disable rule:line-length
 ---
 name: settings
 description: settings
@@ -17,7 +18,7 @@ inputs:
       030/settings-action.
     required: true
   settings_actions_allowed_actions:
-    default: "all"
+    default: all
     description: |
       Actions permissions: 'all', 'local_only', or 'selected'. Use
       'selected' to allow OWNER and select non-OWNER actions and
@@ -48,7 +49,7 @@ inputs:
       Require actions to be pinned to a full-length commit SHA.
     required: true
   settings_default_workflow_permissions:
-    default: "read"
+    default: read
     description: |
       Set the default workflow permission to 'read' or 'write'.
     required: true
@@ -112,7 +113,7 @@ inputs:
       At least one topic have to be set.
     required: true
 runs:
-  using: "composite"
+  using: composite
   steps:
     - name: display the gh cli version
       run: gh --version