diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml index 3124f030..64a03019 100644 --- a/.github/workflows/main.yml +++ b/.github/workflows/main.yml @@ -27,7 +27,7 @@ jobs: python-version: "${{ matrix.python-version }}" allow-python-prereleases: true cache: true - version: "2.19.2" + version: "2.21.0" - name: "Run Tox" run: | @@ -113,7 +113,7 @@ jobs: - uses: "pdm-project/setup-pdm@v4" with: python-version: "3.12" - version: "2.19.2" + version: "2.21.0" - name: "Install check-wheel-content and twine" run: "python -m pip install twine check-wheel-contents" diff --git a/.github/workflows/zizmor.yml b/.github/workflows/zizmor.yml index 4b10100c..28635130 100644 --- a/.github/workflows/zizmor.yml +++ b/.github/workflows/zizmor.yml @@ -1,4 +1,3 @@ -# https://github.com/woodruffw/zizmor name: Zizmor on: @@ -10,24 +9,24 @@ on: permissions: contents: read - jobs: zizmor: - name: Zizmor latest via Cargo + name: Zizmor latest via uv runs-on: ubuntu-latest permissions: security-events: write + steps: - name: Checkout repository uses: actions/checkout@v4 with: persist-credentials: false - - name: Setup Rust - uses: actions-rust-lang/setup-rust-toolchain@v1 - - name: Get zizmor - run: cargo install zizmor + - name: Install the latest version of uv + uses: astral-sh/setup-uv@v4 + with: + version: "latest" - name: Run zizmor - run: zizmor --format sarif . > results.sarif + run: uvx zizmor --format sarif . > results.sarif - name: Upload SARIF file uses: github/codeql-action/upload-sarif@v3 with: