From 9c3dc41682f8ae170bca61658028ab1cb6c4bfbc Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Andreas=20M=C3=B6ller?= <am@localheinz.com>
Date: Thu, 18 Jun 2026 16:55:34 +0200
Subject: [PATCH] Fix: Move zizmor artipacked ignore for renew.yaml into
 configuration

Claude-Session: https://claude.ai/code/session_01GuKTZDbvHNQvVHjqRNEn7C
---
 .github/workflows/renew.yaml | 2 +-
 .github/zizmor.yaml          | 4 ++++
 2 files changed, 5 insertions(+), 1 deletion(-)
 create mode 100644 .github/zizmor.yaml

diff --git a/.github/workflows/renew.yaml b/.github/workflows/renew.yaml
index 7ed3d399..fcbd4647 100644
--- a/.github/workflows/renew.yaml
+++ b/.github/workflows/renew.yaml
@@ -26,7 +26,7 @@ jobs:
 
     steps:
       - name: "Checkout"
-        uses: "actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd" # v6.0.2  # zizmor: ignore[artipacked]
+        uses: "actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd" # v6.0.2
         with:
           token: "${{ secrets.ERGEBNIS_BOT_TOKEN }}"
 
diff --git a/.github/zizmor.yaml b/.github/zizmor.yaml
new file mode 100644
index 00000000..a08d7d9d
--- /dev/null
+++ b/.github/zizmor.yaml
@@ -0,0 +1,4 @@
+rules:
+  artipacked:
+    ignore:
+      - "renew.yaml"