Skip to content

Commit 6337d3d

Browse files
committed
Use shared zizmor workflow
1 parent 68ca4f0 commit 6337d3d

1 file changed

Lines changed: 2 additions & 28 deletions

File tree

.github/workflows/zizmor.yml

Lines changed: 2 additions & 28 deletions
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,4 @@
1-
name: GitHub Actions Security Analysis with zizmor
1+
name: GitHub Actions Security Analysis with zizmor 🌈
22

33
on:
44
push:
@@ -19,30 +19,4 @@ permissions:
1919

2020
jobs:
2121
zizmor:
22-
name: Run zizmor
23-
runs-on: ubuntu-latest
24-
steps:
25-
- name: Checkout repository
26-
uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
27-
with:
28-
persist-credentials: false
29-
30-
- name: Create zizmor configuration
31-
run: |
32-
cat > .zizmor-shared.yml <<'YAML'
33-
rules:
34-
unpinned-uses:
35-
config:
36-
policies:
37-
"yiisoft/*": any
38-
YAML
39-
40-
- name: Run zizmor
41-
uses: zizmorcore/zizmor-action@5f14fd08f7cf1cb1609c1e344975f152c7ee938d # v0.5.6
42-
with:
43-
advanced-security: false
44-
annotations: true
45-
config: .zizmor-shared.yml
46-
inputs: .github
47-
min-severity: high
48-
persona: 'pedantic'
22+
uses: yiisoft/actions/.github/workflows/zizmor.yml@master

0 commit comments

Comments
 (0)