We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
There was an error while loading. Please reload this page.
1 parent 51bc9a5 commit 8ad0fd2Copy full SHA for 8ad0fd2
1 file changed
.github/workflows/zizmor.yml
@@ -32,7 +32,7 @@ jobs:
32
# see https://github.com/zizmorcore/zizmor-action
33
uses: zizmorcore/zizmor-action@b1d7e1fb5de872772f31590499237e7cce841e8e # v0.5.3
34
with:
35
- # false: emit findings as workflow-command annotations (::error file=…) rather than
+ # advanced-security: false => emit findings as workflow-command annotations (::error file=…) rather than
36
# uploading a SARIF report to GitHub's Security tab.
37
# Uploading SARIF requires `security-events: write` and GitHub Advanced Security (GHAS),
38
# both of which are unnecessary here and would violate the least-privilege policy.
0 commit comments