We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
1 parent f22be93 commit 851b56aCopy full SHA for 851b56a
.github/workflows/zizmor.yaml
@@ -13,8 +13,7 @@ jobs:
13
runs-on: ubuntu-latest
14
permissions:
15
security-events: write
16
- contents: read # only needed for private or internal repos
17
- actions: read # only needed for private or internal repos
+ #
18
steps:
19
- name: Checkout repository
20
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
@@ -23,3 +22,7 @@ jobs:
23
22
24
- name: Run zizmor 🌈
25
uses: zizmorcore/zizmor-action@71321a20a9ded102f6e9ce5718a2fcec2c4f70d8 # v0.5.2
+ with:
26
+ # intentionally not scanning the entire repository,
27
+ inputs: ./.github/
28
+ advanced-security: <no value>
0 commit comments