diff --git a/.github/workflows/zizmor.yaml b/.github/workflows/zizmor.yaml index 3f4383b..d199c2c 100644 --- a/.github/workflows/zizmor.yaml +++ b/.github/workflows/zizmor.yaml @@ -1,10 +1,13 @@ -name: "GitHub Actions Security Analysis with zizmor \U0001F308" +name: GitHub Actions Security Analysis with zizmor 🌈 + on: push: branches: ["main"] pull_request: branches: ["**"] + permissions: {} + jobs: zizmor: runs-on: ubuntu-latest @@ -15,8 +18,9 @@ jobs: uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 with: persist-credentials: false - - name: "Run zizmor \U0001F308" - uses: zizmorcore/zizmor-action@b572f7b1a1c2d41efaab43d504f68d215c3cd727 # v0.5.4 + + - name: Run zizmor 🌈 + uses: zizmorcore/zizmor-action@5f14fd08f7cf1cb1609c1e344975f152c7ee938d # v0.5.6 with: # intentionally not scanning the entire repository, inputs: ./.github/