1 parent a079cbb commit 746fb60Copy full SHA for 746fb60
1 file changed
.github/workflows/zizmor.yml
@@ -0,0 +1,24 @@
1
+name: GitHub Actions Security Analysis with zizmor 🌈
2
+
3
+on:
4
+ push:
5
+ branches: ["main"]
6
+ pull_request:
7
+ branches: ["**"]
8
9
+permissions: {}
10
11
+jobs:
12
+ zizmor:
13
+ name: Run zizmor 🌈
14
+ runs-on: ubuntu-latest
15
+ permissions:
16
+ security-events: write
17
+ steps:
18
+ - name: Checkout repository
19
+ uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
20
+ with:
21
+ persist-credentials: false
22
23
+ - name: Run zizmor 🌈
24
+ uses: zizmorcore/zizmor-action@cc914d7f3750a2d13d75c7f184a1060aa0e9d482 # v0.6.4
0 commit comments