ci: zizmor --pedantic

oxc-project · Dec 13, 2024 · a8850cd · a8850cd
1 parent e812ae3
commit a8850cd
Showing 1 changed file with 6 additions and 4 deletions.
diff --git a/.github/workflows/ci_security.yml b/.github/workflows/ci_security.yml
@@ -25,11 +25,13 @@ jobs:
         with:
           persist-credentials: false
 
-      - name: Install the latest version of uv
-        uses: astral-sh/setup-uv@38f3f104447c67c051c4a08e39b64a148898af3a # v4
+      - name: Install zizmor
+        uses: taiki-e/install-action@8c39981484df4e7ba41af8e8e078ac546d5e1b11 # v2.46.8
+        with:
+          tool: zizmor
 
-      - name: Run zizmor 🌈
-        run: uvx zizmor --format sarif . > results.sarif
+      - name: Run zizmor
+        run: zizmor --pedantic --format sarif .github/workflows > results.sarif
         env:
           GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}