Skip to content

Commit e055d06

Browse files
committed
ci(zizmor): Use zizmor action directly
Signed-off-by: Joas Schilling <coding@schilljs.com>
1 parent 082cbd4 commit e055d06

1 file changed

Lines changed: 14 additions & 7 deletions

File tree

.github/workflows/lint-yaml.yml

Lines changed: 14 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -32,11 +32,18 @@ jobs:
3232
config_data: |
3333
line-length: warning
3434
35-
- name: Install the latest version of uv
36-
uses: astral-sh/setup-uv@08807647e7069bb48b6ef5acd8ec9567f424441b # v8.1.0
37-
38-
- name: Check GitHub actions
39-
run: uvx zizmor --min-severity medium .github/workflows/*.yml
35+
- name: Run zizmor 🌈 on actions
36+
uses: zizmorcore/zizmor-action@b1d7e1fb5de872772f31590499237e7cce841e8e # v0.5.3
37+
with:
38+
inputs: '.github/workflows/*.yml'
39+
advanced-security: false
40+
annotations: true
41+
min-severity: 'medium'
4042

41-
- name: Check GitHub workflow-templates
42-
run: uvx zizmor --min-severity medium workflow-templates/*.yml
43+
- name: Run zizmor 🌈 on workflow-templates
44+
uses: zizmorcore/zizmor-action@b1d7e1fb5de872772f31590499237e7cce841e8e # v0.5.3
45+
with:
46+
inputs: 'workflow-templates/*.yml'
47+
advanced-security: false
48+
annotations: true
49+
min-severity: 'medium'

0 commit comments

Comments
 (0)