feat: load separate configs for input groups (#1094)
Some checks failed
Benchmark baseline / Continuous Benchmarking with Bencher (push) Has been cancelled
CI / Lint (push) Has been cancelled
CI / Test (push) Has been cancelled
CI / Test site build (push) Has been cancelled
zizmor wheel builds for PyPI 🐍 / Build Linux wheels (manylinux) (push) Has been cancelled
zizmor wheel builds for PyPI 🐍 / Build Linux wheels (musllinux) (push) Has been cancelled
zizmor wheel builds for PyPI 🐍 / Build Windows wheels (push) Has been cancelled
zizmor wheel builds for PyPI 🐍 / Build macOS wheels (push) Has been cancelled
zizmor wheel builds for PyPI 🐍 / Build source distribution (push) Has been cancelled
Deploy zizmor documentation site 🌐 / Deploy zizmor documentation to GitHub Pages 🌐 (push) Has been cancelled
GitHub Actions Security Analysis with zizmor 🌈 / Run zizmor 🌈 (push) Has been cancelled
CI / All tests pass (push) Has been cancelled
zizmor wheel builds for PyPI 🐍 / Release (push) Has been cancelled

This commit is contained in:
William Woodruff 2025-08-27 23:39:13 -04:00 committed by GitHub
parent 05fd75f958
commit d75933e72d
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
136 changed files with 1528 additions and 664 deletions

View file

@ -685,6 +685,14 @@ the `--config` argument. With `--config`, the file can be named anything:
zizmor --config my-zizmor-config.yml /dir/to/audit
```
!!! important
When using `--config`, only a single configuration file is used
(instead of potentially discovering multiple configuration files,
one per input source). As a result, using `--config` is
**generally not recommended** unless auditing a single input source
(file, directory, or remote repository).
!!! tip
Starting with `v1.8.0`, you can use the `ZIZMOR_CONFIG` environment
@ -693,7 +701,7 @@ zizmor --config my-zizmor-config.yml /dir/to/audit
`ZIZMOR_CONFIG=my-config.yml` is equivalent to
`--config my-config.yml`.
[will discover it]: ./configuration.md#precedence
[will discover it]: ./configuration.md#discovery
See [Configuration: `rules.<id>.ignore`](./configuration.md#rulesidignore) for
more details on writing ignore rules.