Adds github actions static analysis (#1211)

kingbuzzman · web-flow · commit 007b7fa70057 · 2025-06-03T09:37:06.000Z
diff --git a/.github/zizmor.yml b/.github/zizmor.yml
@@ -0,0 +1,6 @@
+rules:
+  unpinned-uses:
+    config:
+      policies:
+        actions/*: ref-pin
+        codecov/codecov-action: ref-pin
diff --git a/pyproject.toml b/pyproject.toml
@@ -63,8 +63,9 @@ xdist = [
     "pytest-xdist",
 ]
 linting = [
-    "ruff==0.9.5",
     "mypy==1.15.0",
+    "ruff==0.9.5",
+    "zizmor==1.9.0",
 ]
 [project.urls]
 Documentation = "https://pytest-django.readthedocs.io/"
diff --git a/tox.ini b/tox.ini
@@ -48,6 +48,7 @@ commands =
     ruff check --diff {posargs:pytest_django pytest_django_test tests}
     ruff format --quiet --diff {posargs:pytest_django pytest_django_test tests}
     mypy {posargs:pytest_django pytest_django_test tests}
+    zizmor --persona=regular .github/workflows/deploy.yml .github/workflows/main.yml
 
 [testenv:doc8]
 basepython = python3

Original file line number	Diff line number	Diff line change
`@@ -63,8 +63,9 @@ xdist = [`
`63`	`63`	`"pytest-xdist",`
`64`	`64`	`]`
`65`	`65`	`linting = [`
`66`		`- "ruff==0.9.5",`
`67`	`66`	`"mypy==1.15.0",`
	`67`	`+ "ruff==0.9.5",`
	`68`	`+ "zizmor==1.9.0",`
`68`	`69`	`]`
`69`	`70`	`[project.urls]`
`70`	`71`	`Documentation = "https://pytest-django.readthedocs.io/"`