scan-github-action.yml

name: Scan for GitHub Actions issues

on:
  pull_request:
  workflow_call:

concurrency:
  group: ${{ github.workflow }}-${{ github.repository }}-${{ github.ref }}

permissions: {}

jobs:
  zizmor:
    name: Scan repository contents
    runs-on: cx-public-ubuntu-x64
    permissions:
      contents: read
    steps:
      - name: Check out repository
        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
        with:
          persist-credentials: false

      - name: Run Zizmor linter
        uses: step-security/zizmor-action@e4ba943ab717e2dc71e7276b8649f48fb7f2519d # v0.5.7
        with:
          advanced-security: false
          annotations: false
          persona: pedantic
          fail-on-no-inputs: false
          online-audits: false