Skip to content

Commit 279093c

Browse files
chore(zizmor): install Zizmor gha action v0.5.2
Made with ❤️️ by updatecli
1 parent 62d4c9d commit 279093c

1 file changed

Lines changed: 31 additions & 0 deletions

File tree

.github/workflows/zizmor.yaml

Lines changed: 31 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,31 @@
1+
name: GitHub Actions Security Analysis with zizmor 🌈
2+
3+
on:
4+
push:
5+
branches: ["main"]
6+
pull_request:
7+
branches: ["**"]
8+
9+
permissions: {}
10+
11+
jobs:
12+
zizmor:
13+
runs-on: ubuntu-latest
14+
permissions:
15+
security-events: write
16+
#
17+
contents: read # only needed for private or internal repos
18+
actions: read # only needed for private or internal repos
19+
#
20+
steps:
21+
- name: Checkout repository
22+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
23+
with:
24+
persist-credentials: false
25+
26+
- name: Run zizmor 🌈
27+
uses: zizmorcore/zizmor-action@71321a20a9ded102f6e9ce5718a2fcec2c4f70d8 # v0.5.2
28+
with:
29+
# intentionally not scanning the entire repository,
30+
inputs: ./.github/
31+
advanced-security: true

0 commit comments

Comments
 (0)