From 1eaedb955a5e7022fc08bbf6a26faba907df5c49 Mon Sep 17 00:00:00 2001 From: Nils Andreas Svee Date: Sun, 10 May 2026 20:29:16 +0700 Subject: [PATCH] ci: add zizmor for GitHub Actions security scanning --- .github/workflows/zizmor.yml | 35 +++++++++++++++++++++++++++++++++++ 1 file changed, 35 insertions(+) create mode 100644 .github/workflows/zizmor.yml diff --git a/.github/workflows/zizmor.yml b/.github/workflows/zizmor.yml new file mode 100644 index 0000000..71da9fd --- /dev/null +++ b/.github/workflows/zizmor.yml @@ -0,0 +1,35 @@ +name: GitHub Actions Security + +on: + push: + branches: + - main + pull_request: + branches: + - main + merge_group: + schedule: + - cron: "11 3 * * 1" + workflow_dispatch: + +permissions: + contents: read + security-events: write + actions: read + +jobs: + zizmor: + name: zizmor + runs-on: ubuntu-latest + timeout-minutes: 10 + + steps: + - name: Checkout + uses: actions/checkout@v6 + with: + persist-credentials: false + + - name: Run zizmor + uses: zizmorcore/zizmor-action@v0.5.3 + with: + persona: regular