We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
There was an error while loading. Please reload this page.
1 parent 9ce7f78 commit f63a4b7Copy full SHA for f63a4b7
.github/workflows/zizmor.yml
@@ -0,0 +1,23 @@
1
+name: GitHub Actions Security Analysis with zizmor
2
+
3
+on:
4
+ push:
5
+ branches:
6
+ - master
7
+ workflow_dispatch:
8
9
+permissions: {}
10
11
+jobs:
12
+ zizmor:
13
+ name: Run zizmor
14
+ runs-on: ubuntu-latest
15
+ permissions:
16
+ security-events: write # Required for upload-sarif (used by zizmor-action) to upload SARIF files.
17
+ steps:
18
+ - name: Checkout repository
19
+ uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
20
+ with:
21
+ persist-credentials: false
22
+ - name: Run zizmor
23
+ uses: zizmorcore/zizmor-action@b1d7e1fb5de872772f31590499237e7cce841e8e # v0.5.3
0 commit comments