From 601a5a48189a3b06f3479f89ef508fa9c0e0dd25 Mon Sep 17 00:00:00 2001 From: "updateclibot[bot]" <92153806+updateclibot[bot]@users.noreply.github.com> Date: Fri, 15 May 2026 07:29:41 +0000 Subject: [PATCH 1/2] chore(zizmor): install Zizmor gha action v0.5.4 MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Made with ❤️️ by updatecli --- .github/workflows/zizmor.yaml | 8 ++++++-- 1 file changed, 6 insertions(+), 2 deletions(-) diff --git a/.github/workflows/zizmor.yaml b/.github/workflows/zizmor.yaml index 3f4383b..7cd897f 100644 --- a/.github/workflows/zizmor.yaml +++ b/.github/workflows/zizmor.yaml @@ -1,10 +1,13 @@ -name: "GitHub Actions Security Analysis with zizmor \U0001F308" +name: GitHub Actions Security Analysis with zizmor 🌈 + on: push: branches: ["main"] pull_request: branches: ["**"] + permissions: {} + jobs: zizmor: runs-on: ubuntu-latest @@ -15,7 +18,8 @@ jobs: uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 with: persist-credentials: false - - name: "Run zizmor \U0001F308" + + - name: Run zizmor 🌈 uses: zizmorcore/zizmor-action@b572f7b1a1c2d41efaab43d504f68d215c3cd727 # v0.5.4 with: # intentionally not scanning the entire repository, From 0c589e368f2f45d064f98c31b080c0a2b25c0414 Mon Sep 17 00:00:00 2001 From: "updateclibot[bot]" <92153806+updateclibot[bot]@users.noreply.github.com> Date: Sun, 17 May 2026 06:49:39 +0000 Subject: [PATCH 2/2] chore(zizmor): install Zizmor gha action v0.5.6 MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Made with ❤️️ by updatecli --- .github/workflows/zizmor.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/zizmor.yaml b/.github/workflows/zizmor.yaml index 7cd897f..d199c2c 100644 --- a/.github/workflows/zizmor.yaml +++ b/.github/workflows/zizmor.yaml @@ -20,7 +20,7 @@ jobs: persist-credentials: false - name: Run zizmor 🌈 - uses: zizmorcore/zizmor-action@b572f7b1a1c2d41efaab43d504f68d215c3cd727 # v0.5.4 + uses: zizmorcore/zizmor-action@5f14fd08f7cf1cb1609c1e344975f152c7ee938d # v0.5.6 with: # intentionally not scanning the entire repository, inputs: ./.github/