Skip to content

install Zizmor gha action v0.6.2 - #278

Merged
olblak merged 3 commits into
mainfrom
updatecli_main_scaffold_zizmor
Aug 25, 2026
Merged

olblak merged 3 commits into
mainfrom
updatecli_main_scaffold_zizmor

Conversation

@olblak

@olblak olblak commented Aug 25, 2026

Copy link
Copy Markdown
Contributor

This PR was automatically created by Updatecli to set up a Zizmor GitHub Action workflow for security scanning.
Zizmor is a static analysis tool that identifies misconfigurations in GitHub Actions workflows. Updatecli is a tool to automate configuration update across git repositories.
For more information:


Install Zizmor GitHub action workflow

fix zizmor findings (all mode)

ran shell command "command -v zizmor >/dev/null 2>&1 || { echo \"zizmor CLI not found in PATH\" >&2; exit 1; }\nzizmor --fix=all --no-exit-codes ./.github/ >&2\ngit diff --name-only\n"

install Zizmor gha action v0.6.2

1 file(s) updated with "name: GitHub Actions Security Analysis with zizmor 🌈\n\non:\n push:\n branches: [\"main\"]\n pull_request:\n branches: [\"**\"]\n\npermissions: {}\n\njobs:\n zizmor:\n runs-on: ubuntu-latest\n permissions:\n security-events: write\n steps:\n - name: Checkout repository\n uses: actions/checkout@3d3c42e # v7.0.1\n with:\n persist-credentials: false\n\n - name: Run zizmor 🌈\n uses: zizmorcore/zizmor-action@3dc1ecc # v0.6.2\n with:\n # intentionally not scanning the entire repository,\n inputs: ./.github/\n advanced-security: true\n": * .github/workflows/zizmor.yaml


Updatecli logo

Created automatically by Updatecli

Options:

Most of Updatecli configuration is done via its manifest(s).

  • If you close this pull request, Updatecli will automatically reopen it, the next time it runs.
  • If you close this pull request and delete the base branch, Updatecli will automatically recreate it, erasing all previous commits made.

Feel free to report any issues at github.com/updatecli/updatecli.
If you find this tool useful, do not hesitate to star our GitHub repository as a sign of appreciation, and/or to tell us directly on our chat!

olblak added 2 commits August 25, 2026 13:37
Made with ❤️️ by updatecli
Made with ❤️️ by updatecli
@olblak
olblak requested a review from kakabisht as a code owner August 25, 2026 11:37
@github-advanced-security

Copy link
Copy Markdown

You are seeing this message because GitHub Code Scanning has recently been set up for this repository, or this pull request contains the workflow file for the Code Scanning tool.

What Enabling Code Scanning Means:

  • The 'Security' tab will display more code scanning analysis results (e.g., for the default branch).
  • Depending on your configuration and choice of analysis tool, future pull requests will be annotated with code scanning analysis results.
  • You will be able to see the analysis results for the pull request's branch on this overview once the scans have completed and the checks have passed.

For more information about GitHub Code Scanning, check out the documentation.

@olblak
olblak enabled auto-merge (squash) August 25, 2026 12:29
@olblak
olblak requested a review from a team as a code owner August 25, 2026 12:32
@olblak
olblak disabled auto-merge August 25, 2026 12:40
@olblak
olblak merged commit 6984951 into main Aug 25, 2026
2 checks passed
@olblak
olblak deleted the updatecli_main_scaffold_zizmor branch August 25, 2026 12:40
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants