Merge pull request #19 from SocketDev/rebs/fix-zizmor-creds

Fix zizmor: pass creds as env var

Author: reberhardt7

.github/workflows/audit-gha-workflows.yml

@@ -18,6 +18,8 @@ jobs:
       - name: Install zizmor
         run: pip install zizmor==1.23.1
       - name: Run zizmor
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
         run: |
           if [ -d .github ]; then
             zizmor .github --gh-token "${GITHUB_TOKEN}" --min-severity medium