From a67ebd0b6f179eac97d83cee0b16730902a10739 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Tin=20Tvrtkovi=C4=87?= Date: Tue, 24 Dec 2024 23:30:07 +0100 Subject: [PATCH] Run Zizmor with GH token (#612) --- .github/workflows/zizmor.yml | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/.github/workflows/zizmor.yml b/.github/workflows/zizmor.yml index 28635130..55b3dca1 100644 --- a/.github/workflows/zizmor.yml +++ b/.github/workflows/zizmor.yml @@ -25,8 +25,10 @@ jobs: uses: astral-sh/setup-uv@v4 with: version: "latest" - - name: Run zizmor + - name: Run zizmor 🌈 run: uvx zizmor --format sarif . > results.sarif + env: + GH_TOKEN: ${{ secrets.GITHUB_TOKEN }} - name: Upload SARIF file uses: github/codeql-action/upload-sarif@v3 with: @@ -34,4 +36,4 @@ jobs: sarif_file: results.sarif # Optional category for the results # Used to differentiate multiple results for one commit - category: zizmor \ No newline at end of file + category: zizmor