chore(sec): run zizmor in CI (#6575)

This commit is contained in:
Frank Elsinga 2026-01-03 01:38:25 +01:00 committed by GitHub
commit b848f581d1
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194

View File

@ -41,3 +41,15 @@ jobs:
uses: github/codeql-action/analyze@5d4e8d1aca955e8d8589aabd499c5cae939e33c7 # v4.31.9
with:
category: "/language:${{matrix.language}}"
zizmor:
runs-on: ubuntu-latest
permissions:
security-events: write
contents: read
actions: read
steps:
- name: Checkout repository
uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
with: { persist-credentials: false }
- name: Run zizmor
uses: zizmorcore/zizmor-action@e639db99335bc9038abc0e066dfcd72e23d26fb4 # v0.3.0