PYTHON-4962 Adopt zizmor GitHub Actions security scanner#312
PYTHON-4962 Adopt zizmor GitHub Actions security scanner#312blink1073 merged 2 commits intomongodb:masterfrom
Conversation
|
This pull request sets up GitHub code scanning for this repository. Once the scans have completed and the checks have passed, the analysis results for this pull request branch will appear on this overview. Once you merge this pull request, the 'Security' tab will show more code scanning analysis results (for example, for the default branch). Depending on your configuration and choice of analysis tool, future pull requests will be annotated with code scanning analysis results. For more information about GitHub code scanning, check out the documentation. |
|
I opened https://jira.mongodb.org/browse/MOTOR-1413 to track the failures. |
.github/workflows/zizmor.yml
Outdated
| @@ -0,0 +1,32 @@ | |||
| name: GitHub Actions Security Analysis with zizmor 🌈 | |||
There was a problem hiding this comment.
Is this 🌈 emoji actually part of the name?
There was a problem hiding this comment.
No it was part of the example in the zizmore repo
There was a problem hiding this comment.
Then can we remove it? It's a little distracting to have emojis in config files.
.github/workflows/zizmor.yml
Outdated
| uses: actions-rust-lang/setup-rust-toolchain@v1 | ||
| - name: Get zizmor | ||
| run: cargo install zizmor | ||
| - name: Run zizmor 🌈 |
No description provided.