Update shivammathur/cache-extensions digest to de3c642 - autoclosed #95
Workflow file for this run
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: GitHub Actions Security Analysis | |
| on: | |
| push: | |
| branches: [8.x] | |
| paths: | |
| - ".github/workflows/**" | |
| - ".github/actions/**" | |
| - "security-analysis.yml" | |
| pull_request: | |
| types: [opened, reopened, synchronize] | |
| paths: | |
| - ".github/workflows/**" | |
| - ".github/actions/**" | |
| - "security-analysis.yml" | |
| workflow_dispatch: | |
| permissions: {} | |
| concurrency: | |
| group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }} | |
| cancel-in-progress: true | |
| jobs: | |
| actionlint: | |
| name: Run actionlint | |
| runs-on: ubuntu-latest | |
| permissions: | |
| contents: read | |
| steps: | |
| - name: Checkout repository | |
| uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 | |
| with: | |
| persist-credentials: false | |
| - name: Run actionlint | |
| run: go run github.com/rhysd/actionlint/cmd/actionlint@v1.7.12 | |
| zizmor: | |
| name: Run zizmor | |
| runs-on: ubuntu-latest | |
| permissions: | |
| actions: read # read workflow artifacts/results for analysis | |
| contents: read # read repo content for workflow scan | |
| security-events: write # publish SARIF findings to Code Scanning | |
| steps: | |
| - name: Checkout repository | |
| uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 | |
| with: | |
| persist-credentials: false | |
| - name: Run zizmor 🌈 | |
| uses: zizmorcore/zizmor-action@6fc4b006235f201fdab3722e17240ab420d580e5 # v0.6.1 |