litellm/.github/CODEOWNERS at dc951d73ceaa2e2992b09557350e548a22f6000b - scriptoriumadmin/litellm - Forgejo: Beyond coding. We forge.

scriptoriumadmin/litellm

mirror of https://github.com/BerriAI/litellm.git synced 2026-10-31 06:56:59 +00:00

yuneng-jiang 93cfc5265e

ci: run zizmor with --no-ignores and move the spend logs and cost map guards to pull_request (#48947 )

* ci(zizmor): run zizmor 1.31.1 without ignores and own the workflow

zizmor-action has no input for --no-ignores, so the workflow now installs the
zizmor 1.31.1 release binary directly, pinned by SHA-256 like grype in
image-scan.yml, and runs it with --no-ignores and --no-config. Inline
`zizmor: ignore` comments and config-file ignores no longer hide findings.
Behavior otherwise matches the old action defaults (regular persona, online
audits with the job token, medium and above, GitHub annotations)

Adds a CODEOWNERS entry for .github/workflows/zizmor.yml

* ci: run spend-logs-guard and cost-map-guard on pull_request

Both guards ran on pull_request_target behind a zizmor ignore comment. They
now run on pull_request and check out the base commit by sha, so the guard
scripts still come from the base branch while the PR's head is only fetched
and diffed. The zizmor ignore comments are gone

2026-10-28 17:44:48 -07:00

5 lines

304 B

Text

Raw Blame History

 /model_prices_and_context_window.json @mateo-berri @ryan-crabbe-berri @kerry-berri @joshua-berri
 /litellm/model_prices_and_context_window_backup.json @mateo-berri @ryan-crabbe-berri @kerry-berri @joshua-berri
 /helm/ @yassin-berriai
 /terraform/ @yassin-berriai
 /.github/workflows/zizmor.yml @yuneng-berri