This is an automated email from the ASF dual-hosted git repository. derrickaw pushed a commit to branch 20260625_addZizmorWorkflow in repository https://gitbox.apache.org/repos/asf/beam.git
commit 9de0f5d7d6ad21e67d45cab2669912f9397ba33c Author: Derrick Williams <[email protected]> AuthorDate: Thu Jun 25 15:47:24 2026 +0000 add zizmor to existing precommit GHA workflow --- .github/workflows/beam_PreCommit_GHA.yml | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/.github/workflows/beam_PreCommit_GHA.yml b/.github/workflows/beam_PreCommit_GHA.yml index af5513a2835..ae562e01934 100644 --- a/.github/workflows/beam_PreCommit_GHA.yml +++ b/.github/workflows/beam_PreCommit_GHA.yml @@ -42,7 +42,7 @@ permissions: packages: read pages: read repository-projects: read - security-events: read + security-events: write statuses: read # This allows a subsequently queued workflow run to interrupt previous runs @@ -78,6 +78,10 @@ jobs: comment_phrase: ${{ matrix.job_phrase }} github_token: ${{ secrets.GITHUB_TOKEN }} github_job: ${{ matrix.job_name }} (${{ matrix.job_phrase }}) + - name: Run zizmor + uses: zizmorcore/zizmor-action@192e21d79ab29983730a13d1382995c2307fbcaa # v0.5.7 + with: + advanced-security: true - name: Setup environment uses: ./.github/actions/setup-environment-action with:
