Skip to content

Commit e45923d

Browse files
committed
Add zizmorify workflow
1 parent 17689d6 commit e45923d

1 file changed

Lines changed: 37 additions & 0 deletions

File tree

.github/workflows/zizmor.yml

Lines changed: 37 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,37 @@
1+
name: GitHub Actions Security Analysis with zizmor 🌈
2+
3+
on:
4+
push:
5+
branches:
6+
- main
7+
paths:
8+
- '.github/**.yml'
9+
- '.github/**.yaml'
10+
pull_request:
11+
paths:
12+
- '.github/**.yml'
13+
- '.github/**.yaml'
14+
15+
concurrency:
16+
group: ${{ github.workflow }}-${{ github.ref }}
17+
cancel-in-progress: true
18+
19+
permissions:
20+
contents: read
21+
22+
jobs:
23+
zizmor:
24+
name: Run zizmor 🌈
25+
runs-on: ubuntu-latest
26+
steps:
27+
- name: Checkout repository
28+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
29+
with:
30+
persist-credentials: false
31+
32+
- name: Run zizmor 🌈
33+
uses: zizmorcore/zizmor-action@5f14fd08f7cf1cb1609c1e344975f152c7ee938d # v0.5.6
34+
with:
35+
advanced-security: false
36+
annotations: true
37+
persona: 'pedantic'

0 commit comments

Comments
 (0)