build(deps): bump axios from 1.17.0 to 1.18.0 in /osprey_ui in the npm_and_yarn group across 1 directory #276

	name: GitHub Actions security analysis

	on:
	push:
	branches: ['main']
	pull_request:
	branches: ['**']

	concurrency:
	group: zizmor-${{ github.ref }}
	cancel-in-progress: true

	permissions: {}

	jobs:
	zizmor:
	name: Run zizmor
	runs-on: ubuntu-latest
	permissions:
	security-events: write # to upload SARIF results to code scanning
	contents: read
	actions: read
	steps:
	- name: Checkout repository
	uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
	with:
	persist-credentials: false

	- name: Run zizmor
	uses: zizmorcore/zizmor-action@192e21d79ab29983730a13d1382995c2307fbcaa # v0.5.7
	with:
	version: "1.25.2"
	# only upload to github advanced security on `main`.
	# on PRs from forks (which do not have permission to push SARIF results)
	# we surface findings as PR annotations instead.
	advanced-security: ${{ github.event_name == 'push' }}
	annotations: ${{ github.event_name == 'pull_request' }}

Navigation Menu