Bump zizmorcore/zizmor-action from 0.6.1 to 0.6.2 in the github-actions group across 1 directory #236
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Zizmor GitHub Actions security analysis | |
| on: | |
| push: | |
| branches: | |
| - main | |
| pull_request: | |
| branches: | |
| - '**' | |
| permissions: {} | |
| jobs: | |
| zizmor: | |
| name: Run Zizmor | |
| runs-on: ubuntu-latest | |
| permissions: | |
| security-events: write # Required for zizmor-action to upload the SARIF report. | |
| contents: read # Needed to clone the repo (private repos). | |
| actions: read # Needed for upload-sarif to read workflow run info (private repos). | |
| steps: | |
| - name: Checkout | |
| uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 | |
| with: | |
| persist-credentials: false | |
| - name: Run Zizmor | |
| uses: zizmorcore/zizmor-action@3dc1ecc9bcb9e94e9b2c709687979e1298497054 # v0.6.2 |