yuneng-jiang 93cfc5265e ci: run zizmor with --no-ignores and move the spend logs and cost map guards to pull_request (#48947) ... * ci(zizmor): run zizmor 1.31.1 without ignores and own the workflow zizmor-action has no input for --no-ignores, so the workflow now installs the zizmor 1.31.1 release binary directly, pinned by SHA-256 like grype in image-scan.yml, and runs it with --no-ignores and --no-config. Inline `zizmor: ignore` comments and config-file ignores no longer hide findings. Behavior otherwise matches the old action defaults (regular persona, online audits with the job token, medium and above, GitHub annotations) Adds a CODEOWNERS entry for .github/workflows/zizmor.yml * ci: run spend-logs-guard and cost-map-guard on pull_request Both guards ran on pull_request_target behind a zizmor ignore comment. They now run on pull_request and check out the base commit by sha, so the guard scripts still come from the base branch while the PR's head is only fetched and diffed. The zizmor ignore comments are gone		2026-10-28 17:44:48 -07:00
..
auto-close-duplicates.yml	fix(ci): stop the auto-close duplicates job colliding with the required test check	2026-09-05 22:26:38 -07:00
check-schema-sync.yml	ci: give the remaining pull_request workflows a concurrency group	2026-08-08 03:25:38 +00:00
codeql.yml	ci(codeql): run the default suite on full scans and security-extended on PRs (#45149)	2026-10-07 13:24:28 -07:00
codspeed.yml	chore(ci): drop litellm_internal_staging and litellm_oss_staging references, main is the only trunk (#42745)	2026-09-23 08:14:11 -07:00
compat-matrix-image.yml	feat(compat-matrix): resolve and install the Claude Code CLI per run (#43038)	2026-09-24 14:35:03 -07:00
conventional-commits.yml	security(proxy): keep team callback credentials out of the stored request body (#43217)	2026-09-28 11:16:58 -07:00
cost-map-guard.yml	ci: run zizmor with --no-ignores and move the spend logs and cost map guards to pull_request (#48947)	2026-10-28 17:44:48 -07:00
create-rc-branch.yml	ci: sync the weekly release cycle with Linear releases (#43636)	2026-09-28 17:00:56 -07:00
create-release-branch.yml	ci(release): create stable/X.Y.x line branch on X.Y.0 tags (#29457)	2026-06-01 15:56:34 -07:00
deploy-dev-on-main.yml	ci: trigger the gateway-dev deploy on every main push (#45958)	2026-10-11 16:44:34 +00:00
duplicate_issue_check.yml	ci(duplicate-check): describe the workspace-write sandbox accurately	2026-09-18 14:21:22 -07:00
e2e_record_replay.yml	ci(e2e): record the e2e suite weekly and replay it on weekdays with zero egress (#38163)	2026-08-24 23:49:03 -04:00
guard-fork-dependencies.yml	chore(ci): drop litellm_internal_staging and litellm_oss_staging references, main is the only trunk (#42745)	2026-09-23 08:14:11 -07:00
image-scan.yml	test: migrate proxy security, schema migration and MCP legacy tests (#45937)	2026-10-11 16:17:24 -07:00
interactions-spec-canary.yml	refactor(rust-bridge): require the native extension (#48852)	2026-10-28 13:16:56 -07:00
issue-keyword-labeler.yml	chore: fixes	2026-04-05 01:30:57 -07:00
issue_classifier.yml	ci(issue-classifier): name every workflow, script and job after the issue it works on	2026-09-18 11:37:55 -07:00
issue_fixed_comment.yml	feat(ci): close open pull requests superseded by a merged fix on their linked issue (#42609)	2026-09-22 18:24:35 -07:00
issue_label_claude_code.yml	ci(issue-classifier): name every workflow, script and job after the issue it works on	2026-09-18 11:37:55 -07:00
issue_label_sync.yml	ci(issue-classifier): name every workflow, script and job after the issue it works on	2026-09-18 11:37:55 -07:00
lens-install-smoke.yml	refactor(lens): connect LiteLLM to the independent Lens service (#45529)	2026-10-09 16:17:05 -07:00
linear-release.yml	ci: sync the weekly release cycle with Linear releases (#43636)	2026-09-28 17:00:56 -07:00
mutation-test.yml	test(ci): repair stale tests and flaky CI infrastructure (#43983)	2026-10-01 17:46:43 +00:00
osv-scan.yml	chore(ci): drop litellm_internal_staging and litellm_oss_staging references, main is the only trunk (#42745)	2026-09-23 08:14:11 -07:00
publish-lint-base-counts.yml	ci: gate undocumented POST routes in the proxy OpenAPI document (#45843)	2026-10-10 21:51:00 +00:00
scorecard.yml	chore: fixes	2026-04-05 01:30:57 -07:00
spend-logs-guard.yml	ci: run zizmor with --no-ignores and move the spend logs and cost map guards to pull_request (#48947)	2026-10-28 17:44:48 -07:00
stale.yml	chore: fixes	2026-04-05 01:30:57 -07:00
sync-schema.yml	chore: fixes	2026-04-05 01:30:57 -07:00
test-e2e-redis-chaos.yml	test(e2e): rename load to perf and consolidate the opt-in into E2E_PERF_TESTS (#46077)	2026-10-12 13:54:03 -07:00
test-linting.yml	refactor(router): fence the router surface and document the router-core boundary (#48839)	2026-10-29 00:01:52 +00:00
test-mcp-dependency-resolution.yml	fix: support Python 3.15 (#48359)	2026-10-26 16:00:11 +00:00
test-merge-smoke.yml	refactor(rust-bridge): require the native extension (#48852)	2026-10-28 13:16:56 -07:00
test-rust-db.yml	feat(rust): add typed database query foundation (#48214)	2026-10-26 17:05:04 -07:00
test-rust.yml	test(rust-bridge): relocate dispatch tests before routing changes (#46926)	2026-10-16 12:29:33 -07:00
test-terraform-modules.yml	chore(ci): drop litellm_internal_staging and litellm_oss_staging references, main is the only trunk (#42745)	2026-09-23 08:14:11 -07:00
test-terraform-provider.yml	test(ci): repair stale tests and flaky CI infrastructure (#43983)	2026-10-01 17:46:43 +00:00
test-unit.yml	fix(streaming): keep merged think tags balanced and split SSE lines only on CR/LF (#48755)	2026-10-28 17:00:29 -07:00
test-vscode-extension.yml	chore(ci): drop litellm_internal_staging and litellm_oss_staging references, main is the only trunk (#42745)	2026-09-23 08:14:11 -07:00
weekly_load_anomaly.yml	test(e2e): rename load to perf and consolidate the opt-in into E2E_PERF_TESTS (#46077)	2026-10-12 13:54:03 -07:00
zizmor.yml	ci: run zizmor with --no-ignores and move the spend logs and cost map guards to pull_request (#48947)	2026-10-28 17:44:48 -07:00