mirror-coreos-chunkah/.github/workflows/zizmor.yml
dependabot[bot] 42e615c1a5
Some checks failed
CI / unit-tests (push) Has been cancelled
Zizmor / Scan GHA workflows (push) Has been cancelled
CI / e2e-tests (fedora, amd64) (push) Has been cancelled
CI / e2e-tests (fedora, arm64) (push) Has been cancelled
CI / e2e-tests (ubi10) (push) Has been cancelled
CI / e2e-tests (ubi9) (push) Has been cancelled
CI / manifest (push) Has been cancelled
CI / release (push) Has been cancelled
ci: bump zizmorcore/zizmor-action
Bumps the actions group with 1 update: [zizmorcore/zizmor-action](https://github.com/zizmorcore/zizmor-action).


Updates `zizmorcore/zizmor-action` from 0.7.1 to 0.8.0
- [Release notes](https://github.com/zizmorcore/zizmor-action/releases)
- [Commits](85b2b9fb8e...53290badfa)

---
updated-dependencies:
- dependency-name: zizmorcore/zizmor-action
  dependency-version: 0.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-11-02 13:42:54 +00:00

24 lines
546 B
YAML

name: Zizmor
on:
push:
branches: ["main"]
pull_request:
branches: ["**"]
permissions: {}
jobs:
zizmor:
name: Scan GHA workflows
runs-on: ubuntu-24.04
permissions:
security-events: write # Required to upload SARIF files
steps:
- name: Checkout repository
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
with:
persist-credentials: false
- name: Run zizmor
uses: zizmorcore/zizmor-action@53290badfa369cb0bf7ad16342cb62c2fa47ac7b # v0.8.0