This is an automated email from the ASF dual-hosted git repository. derrickaw pushed a commit to branch revert-39355-20260716_revertZizmorCheck in repository https://gitbox.apache.org/repos/asf/beam.git
commit dcf99538ee82477895c6f8248439b31b01354597 Author: Derrick Williams <[email protected]> AuthorDate: Fri Jul 17 11:25:23 2026 -0400 Revert "remove zizmor (#39355)" This reverts commit 7aa1eaac120ff9fd48ae414f58068be643846d05. --- .github/workflows/beam_PreCommit_GHA.yml | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/.github/workflows/beam_PreCommit_GHA.yml b/.github/workflows/beam_PreCommit_GHA.yml index ec8bec0edb7..7ad6b5e6758 100644 --- a/.github/workflows/beam_PreCommit_GHA.yml +++ b/.github/workflows/beam_PreCommit_GHA.yml @@ -42,7 +42,7 @@ permissions: packages: read pages: read repository-projects: read - security-events: read + security-events: write statuses: read # This allows a subsequently queued workflow run to interrupt previous runs @@ -80,6 +80,10 @@ jobs: comment_phrase: ${{ matrix.job_phrase }} github_token: ${{ secrets.GITHUB_TOKEN }} github_job: ${{ matrix.job_name }} (${{ matrix.job_phrase }}) + - name: Run zizmor + uses: zizmorcore/zizmor-action@6599ee8b7a49aef6a770f63d261d214911a7ce02 # v0.6.0 + with: + advanced-security: true - name: Setup environment uses: ./.github/actions/setup-environment-action with:
