Files
plugin-skeleton/.github/workflows/zizmor.yml
2026-06-13 18:20:28 +01:00

28 lines
567 B
YAML

name: zizmor
on:
push:
paths:
- '.github/workflows/**'
- '.github/dependabot.yml'
pull_request:
paths:
- '.github/workflows/**'
- '.github/dependabot.yml'
permissions:
contents: read
jobs:
zizmor:
runs-on: ubuntu-latest
permissions:
contents: read
security-events: write
steps:
- uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
with:
persist-credentials: false
- uses: zizmorcore/zizmor-action@5f14fd08f7cf1cb1609c1e344975f152c7ee938d # v0.5.6