ci: add job to lint github actions

using zizmor
2026-03-17 17:37:41 -04:00
parent dd7f7005b2
commit 58f94b0cc1
1 changed files with 14 additions and 1 deletions
@@ -45,7 +45,6 @@ jobs:
      - name: Brakeman audit
        run: bin/brakeman --quiet --no-pager --exit-on-warn --exit-on-error

-
  lint:
    name: Lint
    runs-on: ubuntu-latest
@@ -61,3 +60,17 @@ jobs:

      - name: Lint code for consistent style
        run: bin/rubocop
+
+  zizmor:
+    name: GitHub Actions audit
+    runs-on: ubuntu-latest
+
+    steps:
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+        with:
+          persist-credentials: false
+
+      - name: Run zizmor
+        uses: zizmorcore/zizmor-action@71321a20a9ded102f6e9ce5718a2fcec2c4f70d8 # v0.5.2
+        with:
+          advanced-security: false