We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
There was an error while loading. Please reload this page.
1 parent 26b7d15 commit ddb32acCopy full SHA for ddb32ac
.github/workflows/zizmor.yaml
@@ -0,0 +1,27 @@
1
+name: GitHub Actions Security Analysis with zizmor 🌈
2
+
3
+on:
4
+ push:
5
+ branches: ["main"]
6
+ pull_request:
7
+ branches: ["**"]
8
9
+permissions: {}
10
11
+jobs:
12
+ zizmor:
13
+ runs-on: ubuntu-latest
14
+ permissions:
15
+ security-events: write
16
+ steps:
17
+ - name: Checkout repository
18
+ uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
19
+ with:
20
+ persist-credentials: false
21
22
+ - name: Run zizmor 🌈
23
+ uses: zizmorcore/zizmor-action@71321a20a9ded102f6e9ce5718a2fcec2c4f70d8 # v0.5.2
24
25
+ # intentionally not scanning the entire repository,
26
+ inputs: ./.github/
27
+ advanced-security: true
0 commit comments