diff --git a/.github/workflows/zizmor.yml b/.github/workflows/zizmor.yml index 28635130..55b3dca1 100644 --- a/.github/workflows/zizmor.yml +++ b/.github/workflows/zizmor.yml @@ -25,8 +25,10 @@ jobs: uses: astral-sh/setup-uv@v4 with: version: "latest" - - name: Run zizmor + - name: Run zizmor 🌈 run: uvx zizmor --format sarif . > results.sarif + env: + GH_TOKEN: ${{ secrets.GITHUB_TOKEN }} - name: Upload SARIF file uses: github/codeql-action/upload-sarif@v3 with: @@ -34,4 +36,4 @@ jobs: sarif_file: results.sarif # Optional category for the results # Used to differentiate multiple results for one commit - category: zizmor \ No newline at end of file + category: zizmor