diff --git a/.github/workflows/zizmor.yml b/.github/workflows/zizmor.yml deleted file mode 100644 index 6d35621..0000000 --- a/.github/workflows/zizmor.yml +++ /dev/null @@ -1,28 +0,0 @@ -name: GitHub Actions Security Analysis with zizmor - -on: - push: - branches: - - main - pull_request: - -permissions: {} - -jobs: - zizmor: - name: Run zizmor - runs-on: ubuntu-latest - permissions: - contents: read - steps: - - name: Checkout repository - uses: actions/checkout@v6 - with: - persist-credentials: false - - - name: Run zizmor - uses: zizmorcore/zizmor-action@5f14fd08f7cf1cb1609c1e344975f152c7ee938d # v0.5.6 - with: - advanced-security: false - annotations: true - config: .github/zizmor.yml diff --git a/.pre-commit-config.yaml b/.pre-commit-config.yaml index 2558b8c..115e21e 100644 --- a/.pre-commit-config.yaml +++ b/.pre-commit-config.yaml @@ -24,6 +24,11 @@ repos: - id: actionlint exclude: '(\.lock\.yml$|^\.github/workflows/agentics-maintenance\.yml$)' + - repo: https://github.com/zizmorcore/zizmor-pre-commit + rev: v1.29.0 + hooks: + - id: zizmor + - repo: local hooks: - id: compile-workflows