name: zizmor
permissions: {}
concurrency:
group: zizmor-${{ github.ref_name }}
cancel-in-progress: true
on:
push:
branches:
- main
pull_request:
branches:
- main
schedule:
- cron: "42 18 * * 5"
workflow_dispatch:
jobs:
analyze:
name: GitHub Actions Security Analysis
runs-on: ubuntu-latest
permissions:
actions: read
contents: read
security-events: write
steps:
- name: Checkout repository
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd with:
persist-credentials: false
- name: Run zizmor
uses: zizmorcore/zizmor-action@5f14fd08f7cf1cb1609c1e344975f152c7ee938d with:
inputs: .github