Bump the github-actions group across 1 directory with 6 updates #24

	# zizmor audits the GitHub Actions workflows themselves for security issues
	# (injection, excessive permissions, unpinned actions, etc.).
	# Results appear under the repository's "Security > Code scanning" tab.

	name: zizmor

	on:
	push:
	branches: [ "master" ]
	pull_request:
	branches: [ "master" ]

	permissions:
	contents: read

	jobs:
	zizmor:
	runs-on: ubuntu-latest
	permissions:
	security-events: write
	contents: read

	steps:
	- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
	with:
	persist-credentials: false

	- name: Install uv
	uses: astral-sh/setup-uv@c771a70e6277c0a99b617c7a806ffedaca235ff9 # v9.0.0

	# Audit all workflow files. continue-on-error so findings still get uploaded
	# to code scanning instead of aborting before the upload step.
	- name: Run zizmor
	continue-on-error: true
	run: uvx zizmor --format sarif . > zizmor.sarif
	env:
	GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}

	- name: Upload SARIF
	uses: github/codeql-action/upload-sarif@e0647621c2984b5ed2f768cb892365bf2a616ad1 # v4.37.2
	with:
	sarif_file: zizmor.sarif
	category: zizmor

Provide feedback