Harden GHA with Zizmor #2681
Description
Hey @oraNod, here's an integration you can add through GHA itself:
---
name: GitHub Actions Security Analysis with zizmor 🌈
on: # yamllint disable-line rule:truthy
push:
pull_request:
jobs:
zizmor:
name: 🌈 zizmor
permissions:
security-events: write
# yamllint disable-line rule:line-length
uses: zizmorcore/workflow/.github/workflows/reusable-zizmor.yml@3bb5e95068d0f44b6d2f3f7e91379bed1d2f96a8
...Optionally, it could also be added to pre-commit on top: https://docs.zizmor.sh/usage/#use-with-pre-commit.
It'll reveal a number of problems, each explained @ https://docs.zizmor.sh/audits/.
cc @felixfontein @gotmax23 this might be interesting to you in context of the entire set of community repos.
Metadata
Metadata
Labels
Type
Projects
Status