Merge pull request #2 from daylight-00/agent/fix-waiver-qualified-tag #25

	name: zizmor

	# The workflows are the one place in this repository where a mistake runs with
	# credentials, so they get a linter of their own.

	on:
	push:
	branches: [main]
	pull_request:
	workflow_dispatch:

	# Nothing by default; the job below asks for what it uploads its findings to.
	permissions: {}

	jobs:
	zizmor:
	name: lint workflows
	runs-on: ubuntu-latest
	permissions:
	# Findings are uploaded to the repository's code scanning view.
	security-events: write
	steps:
	- uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0
	with:
	persist-credentials: false

	- uses: zizmorcore/zizmor-action@6fc4b006235f201fdab3722e17240ab420d580e5 # v0.6.1

Navigation Menu