name: GitHub Actions Security Analysis
on:
workflow_dispatch:
pull_request:
types:
paths:
- ".github/workflows/**"
push:
branches:
- main
- "renovate/**"
paths:
- ".github/workflows/**"
permissions:
jobs:
zizmor:
uses: luxass/shared-workflows/.github/workflows/reusable-ci-security.yaml@ce9e8e27eebe8940214594f75f503742a4db8150 # v0.6.0
permissions:
contents: read
security-events: write
id-token: write
actions: read
with:
zizmor-version: v1.25.0