aboutsummaryrefslogtreecommitdiff
path: root/.github/workflows/zizmor.yml
diff options
context:
space:
mode:
Diffstat (limited to '.github/workflows/zizmor.yml')
-rw-r--r--.github/workflows/zizmor.yml6
1 files changed, 3 insertions, 3 deletions
diff --git a/.github/workflows/zizmor.yml b/.github/workflows/zizmor.yml
index c2a03ab..daf4866 100644
--- a/.github/workflows/zizmor.yml
+++ b/.github/workflows/zizmor.yml
@@ -16,12 +16,12 @@ jobs:
security-events: write
steps:
- name: Checkout repository
- uses: actions/checkout@v4
+ uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
with:
persist-credentials: false
- name: Install the latest version of uv
- uses: astral-sh/setup-uv@v5
+ uses: astral-sh/setup-uv@0c5e2b8115b80b4c7c5ddf6ffdd634974642d182 # v5.4.1
- name: Run zizmor 🌈
run: uvx zizmor --format sarif . > results.sarif
@@ -29,7 +29,7 @@ jobs:
GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
- name: Upload SARIF file
- uses: github/codeql-action/upload-sarif@v3
+ uses: github/codeql-action/upload-sarif@1b549b9259bda1cb5ddde3b41741a82a2d15a841 # v3.28.13
with:
sarif_file: results.sarif
category: zizmor