[release-12.0.1] Backport workflow fixes (#104692)

* Copy workflows and actions from main * add zizmor.yml
2025-04-29 11:12:47 -05:00
parent 18fb652499
commit 8bb4c806fb
71 changed files with 826 additions and 708 deletions
@@ -24,10 +24,11 @@ jobs:
    name: Validate Backend Configs
    runs-on: ubuntu-latest
    steps:
-      - uses: actions/checkout@v4
-      
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683
+        with:
+          persist-credentials: false
      - name: Setup Go
-        uses: actions/setup-go@v5
+        uses: actions/setup-go@111f3307d8850f501ac008e886eec1fd1932a34
        with:
          # Explicitly set Go version to 1.24.1 to ensure consistent OpenAPI spec generation
          # The crypto/x509 package has additional fields in Go 1.24.1 that affect the generated specs