Joe Rickerby
35452dcd42
* Add zizmor as a CI check I'm curious about adding this tool, so experimenting with it here... See #2770 for the impetus. * Lie about a tag to see what happens * Revert "Lie about a tag to see what happens" This reverts commit f0e78b8c92c2d00f71d44e83d7904d8728427341.
25 lines
551 B
YAML
25 lines
551 B
YAML
name: zizmor - GitHub Actions Security Analysis
|
|
|
|
on:
|
|
push:
|
|
branches: ["main"]
|
|
pull_request:
|
|
branches: ["**"]
|
|
|
|
permissions: {}
|
|
|
|
jobs:
|
|
zizmor:
|
|
name: Run zizmor 🌈
|
|
runs-on: ubuntu-latest
|
|
permissions:
|
|
security-events: write
|
|
steps:
|
|
- name: Checkout repository
|
|
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
|
|
with:
|
|
persist-credentials: false
|
|
|
|
- name: Run zizmor 🌈
|
|
uses: zizmorcore/zizmor-action@71321a20a9ded102f6e9ce5718a2fcec2c4f70d8 # v0.5.2
|