diff --git a/.github/workflows/zizmor.yml b/.github/workflows/zizmor.yml index 9c447a38..c2c394f6 100644 --- a/.github/workflows/zizmor.yml +++ b/.github/workflows/zizmor.yml @@ -10,25 +10,14 @@ permissions: {} jobs: zizmor: - name: zizmor latest via PyPI runs-on: ubuntu-latest permissions: security-events: write - # required for workflows in private repositories - contents: read - actions: read steps: - name: Checkout repository uses: actions/checkout@v5 with: persist-credentials: false - - name: Install the latest version of uv - uses: astral-sh/setup-uv@eb1897b8dc4b5d5bfe39a428a8f2304605e0983c # 7.0.0 - with: - enable-cache: false - - name: Run zizmor - run: uvx zizmor@1.13.0 --format plain . - env: - GH_TOKEN: ${{ secrets.GITHUB_TOKEN }} + uses: zizmorcore/zizmor-action@e673c3917a1aef3c65c972347ed84ccd013ecda4 # v0.2.0