Bump zizmorcore/zizmor-action from 0.1.2 to 0.2.0 (#315) #603

	# `dist/index.js` is a special file in Actions.
	# When you reference an action with `uses:` in a workflow,
	# `index.js` is the code that will run.
	# For our project, we generate this file through a build process from other source files.
	# We need to make sure the checked-in `index.js` actually matches what we expect it to be.
	name: Check dist/

	on:
	push:
	branches:
	- main
	paths-ignore:
	- '**.md'
	pull_request:
	paths-ignore:
	- '**.md'
	workflow_dispatch:

	permissions: {}

	jobs:
	check-dist:
	runs-on: ubuntu-latest

	steps:
	- uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
	with:
	persist-credentials: false

	- name: Set up Node.js
	uses: actions/setup-node@a0853c24544627f65ddf259abe73b1d18a591444 # v5.0.0
	with:
	node-version-file: .nvmrc

	- name: Install dependencies
	run: npm ci

	- name: Rebuild the dist/ directory
	run: \|
	npm run build
	npm run package

	- name: Compare the expected and actual dist/ directories
	run: \|
	if [ "$(git diff --ignore-space-at-eol dist/ \| wc -l)" -gt "0" ]; then
	echo "Detected uncommitted changes after build. See status below:"
	git diff
	exit 1
	fi
	id: diff

	# If index.js was different than expected, upload the expected version as an artifact
	- uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
	if: ${{ failure() && steps.diff.conclusion == 'failure' }}
	with:
	name: dist
	path: dist/

Provide feedback