We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
1 parent 62d4c9d commit 279093cCopy full SHA for 279093c
1 file changed
.github/workflows/zizmor.yaml
@@ -0,0 +1,31 @@
1
+name: GitHub Actions Security Analysis with zizmor 🌈
2
+
3
+on:
4
+ push:
5
+ branches: ["main"]
6
+ pull_request:
7
+ branches: ["**"]
8
9
+permissions: {}
10
11
+jobs:
12
+ zizmor:
13
+ runs-on: ubuntu-latest
14
+ permissions:
15
+ security-events: write
16
+ #
17
+ contents: read # only needed for private or internal repos
18
+ actions: read # only needed for private or internal repos
19
20
+ steps:
21
+ - name: Checkout repository
22
+ uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
23
+ with:
24
+ persist-credentials: false
25
26
+ - name: Run zizmor 🌈
27
+ uses: zizmorcore/zizmor-action@71321a20a9ded102f6e9ce5718a2fcec2c4f70d8 # v0.5.2
28
29
+ # intentionally not scanning the entire repository,
30
+ inputs: ./.github/
31
+ advanced-security: true
0 commit comments