Merge pull request #2507 from GitoxideLabs/improvements #647
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: GitHub Actions Security Analysis with zizmor 🌈 | |
| on: | |
| push: | |
| branches: | |
| - main | |
| - 'run-ci/**' | |
| - '**/run-ci/**' | |
| pull_request: | |
| branches: | |
| - main | |
| workflow_dispatch: | |
| permissions: {} # Expanded in the `zizmor` job. | |
| jobs: | |
| zizmor: | |
| runs-on: ubuntu-latest | |
| permissions: | |
| security-events: write # Required for uploading SARIF to view in the Security tab. | |
| contents: read # Not needed in public repos. (Kept for private forks/reuploads.) | |
| actions: read # Not needed in public repos. (Kept for private forks/reuploads.) | |
| steps: | |
| - name: Checkout repository | |
| uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 | |
| with: | |
| persist-credentials: false | |
| - name: Run zizmor 🌈 | |
| uses: zizmorcore/zizmor-action@71321a20a9ded102f6e9ce5718a2fcec2c4f70d8 # v0.5.2 | |
| with: | |
| persona: pedantic |