We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
2 parents b8e5f68 + 22dcec8 commit ab5ce5cCopy full SHA for ab5ce5c
.github/workflows/zizmor.yml
@@ -23,15 +23,15 @@ jobs:
23
persist-credentials: false
24
25
- name: Install the latest version of uv
26
- uses: astral-sh/setup-uv@557e51de59eb14aaaba2ed9621916900a91d50c6 # v6.6.1
+ uses: astral-sh/setup-uv@eb1897b8dc4b5d5bfe39a428a8f2304605e0983c # v7.0.0
27
28
- name: Run zizmor 🌈
29
run: uvx zizmor --format=sarif . > results.sarif
30
env:
31
GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
32
33
- name: Upload SARIF file
34
- uses: github/codeql-action/upload-sarif@3c3833e0f8c1c83d449a7478aa59c036a9165498 # v3.29.11
+ uses: github/codeql-action/upload-sarif@e296a935590eb16afc0c0108289f68c87e2a89a5 # v4.30.7
35
with:
36
sarif_file: results.sarif
37
category: zizmor
0 commit comments