zizmor.yml 768 B

123456789101112131415161718192021222324252627282930
  1. name: Zizmor CI
  2. on:
  3. push:
  4. branches: [ edge ]
  5. pull_request:
  6. branches: [ edge ]
  7. permissions: {}
  8. concurrency:
  9. group: zizmor-${{ github.ref }}
  10. cancel-in-progress: true
  11. jobs:
  12. zizmor:
  13. name: zizmor
  14. runs-on: ubuntu-26.04
  15. permissions:
  16. security-events: write # So that the findings can be listed in the "Security" tab under the "Code scanning" section
  17. steps:
  18. - name: Checkout repository
  19. uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
  20. with:
  21. persist-credentials: false
  22. - name: Run zizmor 🌈
  23. uses: zizmorcore/zizmor-action@3dc1ecc9bcb9e94e9b2c709687979e1298497054 # v0.6.2
  24. with:
  25. persona: pedantic # https://docs.zizmor.sh/usage/#using-personas