We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
There was an error while loading. Please reload this page.
1 parent 7b87d39 commit cd60966Copy full SHA for cd60966
1 file changed
.github/workflows/zizmor.yml
@@ -0,0 +1,26 @@
1
+name: GitHub Actions Security Analysis with zizmor
2
+
3
+on:
4
+ push:
5
+ branches: ["main"]
6
+ pull_request:
7
+ branches: ["**"]
8
9
+permissions: {}
10
11
+jobs:
12
+ zizmor:
13
+ name: Run zizmor
14
+ runs-on: ubuntu-latest
15
+ permissions:
16
+ security-events: write
17
+ contents: read
18
+ actions: read
19
+ steps:
20
+ - name: Checkout repository
21
+ uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
22
+ with:
23
+ persist-credentials: false
24
25
+ - name: Run zizmor
26
+ uses: zizmorcore/zizmor-action@5f14fd08f7cf1cb1609c1e344975f152c7ee938d # v0.5.6
0 commit comments