---
name: zizmor
"on":
pull_request:
push:
branches:
- main
permissions: {}
concurrency:
group: zizmor-${{ github.workflow }}-${{ github.ref }}
cancel-in-progress: true
jobs:
zizmor:
name: Audit the workflows and actions
runs-on: ubuntu-latest
timeout-minutes: 10
permissions:
security-events: write
steps:
- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 with:
persist-credentials: false
- uses: zizmorcore/zizmor-action@53290badfa369cb0bf7ad16342cb62c2fa47ac7b with:
version: 1.30.1