From 5172f324579e6a3858a816912e6d8a284d5debad Mon Sep 17 00:00:00 2001 From: "Alexander S." Date: Fri, 13 Dec 2024 13:54:26 +0100 Subject: [PATCH] ci: use zizmor as a rust package (#7844) Co-authored-by: Boshen --- .github/workflows/ci_security.yml | 7 ++++--- 1 file changed, 4 insertions(+), 3 deletions(-) diff --git a/.github/workflows/ci_security.yml b/.github/workflows/ci_security.yml index a6e8fcd031027..a6fe189c66f9c 100644 --- a/.github/workflows/ci_security.yml +++ b/.github/workflows/ci_security.yml @@ -25,11 +25,12 @@ jobs: with: persist-credentials: false - - name: Install the latest version of uv - uses: astral-sh/setup-uv@38f3f104447c67c051c4a08e39b64a148898af3a # v4 + uses: taiki-e/install-action@8c39981484df4e7ba41af8e8e078ac546d5e1b11 # v2.46.8 + with: + tool: zizmor - name: Run zizmor 🌈 - run: uvx zizmor --format sarif . > results.sarif + run: zizmor --format sarif . > results.sarif env: GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}