ci(deps): bump pypa/gh-action-pypi-publish from ab69e431e9c9f48a3310be0a56527c679f56e04d to dc37677b2e1c63e2034f94d8a5b11f265b73ba33 #63

	name: Audit GHA Workflows
	on:
	pull_request:
	push:
	branches: [master, main]
	permissions:
	contents: read
	jobs:
	zizmor:
	name: Audit GitHub Actions
	runs-on: ubuntu-latest
	timeout-minutes: 5
	steps:
	- name: Checkout code
	uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
	with:
	persist-credentials: false
	- name: Install zizmor
	run: pip install zizmor==1.23.1
	- name: Run zizmor
	env:
	GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
	run: \|
	if [ -d .github ]; then
	zizmor .github --gh-token "${GITHUB_TOKEN}" --min-severity medium
	fi

Navigation Menu