Run Zizmor with GH token (#612)

python-attrs · Dec 24, 2024 · a67ebd0 · a67ebd0
1 parent 460003e
commit a67ebd0
Showing 1 changed file with 4 additions and 2 deletions.
diff --git a/.github/workflows/zizmor.yml b/.github/workflows/zizmor.yml
@@ -25,13 +25,15 @@ jobs:
         uses: astral-sh/setup-uv@v4
         with:
           version: "latest"
-      - name: Run zizmor
+      - name: Run zizmor 🌈
         run: uvx zizmor --format sarif . > results.sarif
+        env:
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
       - name: Upload SARIF file
         uses: github/codeql-action/upload-sarif@v3
         with:
           # Path to SARIF file relative to the root of the repository
           sarif_file: results.sarif
           # Optional category for the results
           # Used to differentiate multiple results for one commit
-          category: zizmor
+          category: zizmor