UID2-7445: automate shared-actions releases (dispatch-only) #40
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Zizmor Scan | |
| on: | |
| pull_request: | |
| # Trigger on changes to anything zizmor scans: workflows under .github/ and the | |
| # composite actions this repo ships under actions/. Keep in sync with scan_paths. | |
| paths: | |
| - '.github/**' | |
| - 'actions/**' | |
| workflow_dispatch: | |
| permissions: | |
| contents: read | |
| jobs: | |
| zizmor: | |
| # Bare call: severity floors come from the shared workflow's defaults. | |
| uses: ./.github/workflows/shared-zizmor-scan.yaml |