Conversation
There was a problem hiding this comment.
Pull request overview
This PR updates the repository's security workflows by adding Zizmor security scanning and reorganizing security badges. The changes add a new automated security analysis tool, restrict workflow triggers to the main branch, and update badge placement in documentation.
Changes:
- Adds new Zizmor workflow for GitHub Actions security scanning
- Moves OpenSSF Scorecard badge from SECURITY.md to README.md
- Restricts test and lint workflow triggers to only run on main branch pushes
Reviewed changes
Copilot reviewed 5 out of 5 changed files in this pull request and generated 3 comments.
Show a summary per file
| File | Description |
|---|---|
| .github/workflows/zizmor.yml | New workflow that runs Zizmor security analysis on GitHub Actions workflows |
| SECURITY.md | Adds Zizmor badge and removes OpenSSF Scorecard badge |
| README.md | Adds OpenSSF Scorecard badge (moved from SECURITY.md) |
| .github/workflows/test.yml | Adds branch filter to only run on main branch pushes |
| .github/workflows/lint.yml | Adds branch filter to only run on main branch pushes |
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
|
This pull request sets up GitHub code scanning for this repository. Once the scans have completed and the checks have passed, the analysis results for this pull request branch will appear on this overview. Once you merge this pull request, the 'Security' tab will show more code scanning analysis results (for example, for the default branch). Depending on your configuration and choice of analysis tool, future pull requests will be annotated with code scanning analysis results. For more information about GitHub code scanning, check out the documentation. |
There was a problem hiding this comment.
Pull request overview
Copilot reviewed 5 out of 5 changed files in this pull request and generated 2 comments.
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
There was a problem hiding this comment.
Pull request overview
Copilot reviewed 5 out of 5 changed files in this pull request and generated no new comments.
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
No description provided.