diff --git a/.github/workflows/audit.yaml b/.github/workflows/audit.yaml index 6d9dd9e6..781ebfa3 100644 --- a/.github/workflows/audit.yaml +++ b/.github/workflows/audit.yaml @@ -62,3 +62,19 @@ jobs: arguments: --locked --all-features command: check ${{ matrix.checks }} command-arguments: --show-stats + + zizmor: + name: Run zizmor 🌈 + runs-on: ubuntu-latest + permissions: + security-events: write + steps: + - name: Checkout repository + uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 + with: + persist-credentials: false + + - name: Run zizmor 🌈 + uses: zizmorcore/zizmor-action@f52a838cfabf134edcbaa7c8b3677dde20045018 # v0.1.1 + with: + persona: "pedantic"