This is an automated email from the ASF dual-hosted git repository.
derrickaw pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/beam.git
The following commit(s) were added to refs/heads/master by this push:
new ccac91ad9b8 add zizmor to existing precommit GHA workflow (#39108)
ccac91ad9b8 is described below
commit ccac91ad9b883390c8c59d07dff8465eaeb2c4d7
Author: Derrick Williams <[email protected]>
AuthorDate: Mon Jun 29 10:18:01 2026 -0400
add zizmor to existing precommit GHA workflow (#39108)
---
.github/workflows/beam_PreCommit_GHA.yml | 6 +++++-
1 file changed, 5 insertions(+), 1 deletion(-)
diff --git a/.github/workflows/beam_PreCommit_GHA.yml
b/.github/workflows/beam_PreCommit_GHA.yml
index af5513a2835..ae562e01934 100644
--- a/.github/workflows/beam_PreCommit_GHA.yml
+++ b/.github/workflows/beam_PreCommit_GHA.yml
@@ -42,7 +42,7 @@ permissions:
packages: read
pages: read
repository-projects: read
- security-events: read
+ security-events: write
statuses: read
# This allows a subsequently queued workflow run to interrupt previous runs
@@ -78,6 +78,10 @@ jobs:
comment_phrase: ${{ matrix.job_phrase }}
github_token: ${{ secrets.GITHUB_TOKEN }}
github_job: ${{ matrix.job_name }} (${{ matrix.job_phrase }})
+ - name: Run zizmor
+ uses: zizmorcore/zizmor-action@192e21d79ab29983730a13d1382995c2307fbcaa
# v0.5.7
+ with:
+ advanced-security: true
- name: Setup environment
uses: ./.github/actions/setup-environment-action
with:
