|
name: GitHub Actions Security Analysis with zizmor 🌈 |
|
|
|
on: |
|
push: |
|
branches: ["main"] |
|
pull_request: |
|
branches: ["**"] |
|
|
|
permissions: {} |
|
|
|
jobs: |
|
zizmor: |
|
name: Run zizmor 🌈 |
|
runs-on: ubuntu-latest |
|
permissions: |
|
security-events: write # Required for upload-sarif (used by zizmor-action) to upload SARIF files. |
|
steps: |
|
- name: Checkout repository |
|
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 |
|
with: |
|
persist-credentials: false |
|
|
|
- name: Run zizmor 🌈 |
|
uses: zizmorcore/zizmor-action@b1d7e1fb5de872772f31590499237e7cce841e8e # v0.5.3 |