diff --git a/.github/workflows/reusable-workflow-checks.yml b/.github/workflows/reusable-workflow-checks.yml index 3111c96..a83c1d5 100644 --- a/.github/workflows/reusable-workflow-checks.yml +++ b/.github/workflows/reusable-workflow-checks.yml @@ -111,14 +111,14 @@ jobs: - name: Run zizmor id: zizmor if: needs.detect-ghas.outputs.ghas-available == 'true' - uses: zizmorcore/zizmor-action@53290badfa369cb0bf7ad16342cb62c2fa47ac7b # v0.8.0 + uses: zizmorcore/zizmor-action@45d7276c9ca790aabd705e31ca99c6185c3e76dd # v0.8.1 with: version: ${{ env.ZIZMOR_VERSION }} # Without Advanced Security, zizmor runs in plain mode, where its own nonzero exit on a finding fails the job. - name: Run zizmor without Advanced Security if: needs.detect-ghas.outputs.ghas-available == 'false' - uses: zizmorcore/zizmor-action@53290badfa369cb0bf7ad16342cb62c2fa47ac7b # v0.8.0 + uses: zizmorcore/zizmor-action@45d7276c9ca790aabd705e31ca99c6185c3e76dd # v0.8.1 with: version: ${{ env.ZIZMOR_VERSION }} advanced-security: false