|
name: GitHub Actions Security Analysis with zizmor 🌈 |
|
|
|
on: |
|
push: |
|
branches: ["main"] |
|
pull_request: |
|
branches: ["**"] |
|
|
|
permissions: {} |
|
|
|
jobs: |
|
zizmor: |
|
runs-on: ubuntu-latest |
|
permissions: |
|
security-events: write |
|
contents: read # only needed for private or internal repos |
|
actions: read # only needed for private or internal repos |
|
steps: |
|
- name: Checkout repository |
|
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 |
|
with: |
|
persist-credentials: false |
|
|
|
- name: Run zizmor 🌈 |
|
uses: zizmorcore/zizmor-action@cc914d7f3750a2d13d75c7f184a1060aa0e9d482 # v0.6.4 |
|
with: |
|
inputs: | |
|
.github/ |