ci: add zizmor for github actions security

oxc-project · Dec 12, 2024 · 6782193 · 6782193
1 parent bb59fa1
commit 6782193
Show file tree

Hide file tree

Showing 2 changed files with 14 additions and 15 deletions.
diff --git a/.github/workflows/ci_security.yml b/.github/workflows/ci_security.yml
@@ -1,17 +1,17 @@
 name: GitHub Actions Security Analysis
 
 on:
-    workflow_dispatch:
-    pull_request:
-      types: [opened, synchronize]
-      paths:
-        - ".github/worfkflows/**"
-    push:
-      branches:
-        - main
-        - "renovate/**"
-      paths:
-        - ".github/worfkflows/**"
+  workflow_dispatch:
+  pull_request:
+    types: [opened, synchronize]
+    paths:
+      - ".github/workflows/**"
+  push:
+    branches:
+      - main
+      - "renovate/**"
+    paths:
+      - ".github/workflows/**"
 
 jobs:
   zizmor:
@@ -29,12 +29,12 @@ jobs:
         uses: astral-sh/setup-uv@v4
 
       - name: Run zizmor 🌈
-        run: uvx zizmor --format sarif . > results.sarif 
+        run: uvx zizmor --format sarif . > results.sarif
         env:
-          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }} 
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
 
       - name: Upload SARIF file
         uses: github/codeql-action/upload-sarif@v3
         with:
           sarif_file: results.sarif
-          category: zizmor
+          category: zizmor
diff --git a/.github/workflows/release_crates.yml b/.github/workflows/release_crates.yml
@@ -8,7 +8,6 @@ on:
     paths:
       - crates/oxc/Cargo.toml
 
-
 concurrency:
   group: ${{ github.workflow }}-${{ github.ref }}
   cancel-in-progress: true