chore(ci): add zizmor workflow for github actions security analysis

This commit is contained in:
jdx 2026-05-12 14:20:57 +00:00
parent ff58e14023
commit 9bc018758e
No known key found for this signature in database
GPG key ID: 584DADE86724B407

19
.github/workflows/zizmor.yml vendored Normal file
View file

@ -0,0 +1,19 @@
name: zizmor
on:
push:
branches: [main]
pull_request:
paths: ['.github/workflows/**']
permissions: {}
jobs:
zizmor:
runs-on: ubuntu-latest
permissions:
contents: read
steps:
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
with:
persist-credentials: false
- uses: zizmorcore/zizmor-action@b1d7e1fb5de872772f31590499237e7cce841e8e # v0.5.3