build(deps): bump actions/checkout from 6.0.0 to 6.0.1 #22

	name: GitHub Actions Security Analysis with zizmor

	# Note: on key treated as boolean key by YAML
	# https://github.com/adrienverge/yamllint/issues/158#issuecomment-454313233
	# However, GitHub Actions documentation is consistent in using it unquoted.
	on: # yamllint disable-line rule:truthy
	push:
	branches: ['main']
	pull_request:
	branches: ['**']
	schedule:
	# Run once a month (at 8:40 AM UTC) to check for exogenous breakage.
	- cron: '40 8 2 * *'
	workflow_dispatch: {}

	permissions: {}

	jobs:
	zizmor:
	runs-on: ubuntu-latest
	permissions:
	security-events: write
	steps:
	- name: Checkout repository
	uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
	with:
	persist-credentials: false

	- name: Run zizmor
	uses: zizmorcore/zizmor-action@e639db99335bc9038abc0e066dfcd72e23d26fb4 # v0.3.0

Provide feedback