mirror of
https://github.com/sxyazi/yazi.git
synced 2026-07-23 15:51:03 +00:00
The winget job hands WINGET_TOKEN to vedantmgoyal9/winget-releaser via the mutable @main branch. Pin to the v2 release commit so the publishing credential is only ever exposed to a fixed, reviewed version of the action. Signed-off-by: kobihikri <kobi.hikri@gmail.com> |
||
|---|---|---|
| .. | ||
| DISCUSSION_TEMPLATE | ||
| ISSUE_TEMPLATE | ||
| workflows | ||
| dependabot.yml | ||
| pull_request_template.md | ||