From 16c552a74e6262a3e12c98ebda8909c17cf9aa66 Mon Sep 17 00:00:00 2001
From: Marco Hostettler <marcohost33@gmail.com>
Date: Mon, 25 May 2026 08:26:15 +0200
Subject: [PATCH] ci(zizmor): Gate statt informativ (public ->
 advanced-security/Dashboard bleibt)

---
 .github/workflows/zizmor.yml | 5 +----
 1 file changed, 1 insertion(+), 4 deletions(-)

diff --git a/.github/workflows/zizmor.yml b/.github/workflows/zizmor.yml
index 96f95a5..92fc065 100644
--- a/.github/workflows/zizmor.yml
+++ b/.github/workflows/zizmor.yml
@@ -32,10 +32,7 @@ jobs:
           persist-credentials: false
 
       - name: Run zizmor
-        # zizmor exits non-zero when it finds issues. Run as informational
-        # (continue-on-error) so the job surfaces findings via SARIF/log
-        # without blocking unrelated CI. Fix findings to clear the warning.
-        continue-on-error: true
+        # zizmor exits non-zero bei Findings -> dieser Step GATET die CI (rot = blockt merge).
         env:
           # [2026-05-23] zizmor impostor-check needs authenticated GH API
           # (60/h -> 1000/h). Without this: false-positive rate-limit errors.