Bump smartcontractkit/.github/actions/ctf-build-image from 61c6a8d174fcae10d436cc38c577f962396babbe to c036253c550f78925aac3160883e5774d0ded42c #468
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Static Analysis | |
| on: | |
| push: | |
| branches: | |
| - develop | |
| - main | |
| pull_request: | |
| jobs: | |
| zizmor_analyzer: | |
| name: Zizmor | |
| runs-on: ubuntu-latest | |
| steps: | |
| - name: Checkout sources | |
| uses: actions/checkout@v5 | |
| with: | |
| persist-credentials: false | |
| - name: Install Nix | |
| uses: cachix/install-nix-action@3715ab1a11cac9e991980d7b4a28d80c7ebdd8f9 # nix:v2.24.6 | |
| with: | |
| nix_path: nixpkgs=channel:nixos-unstable | |
| - name: Report Zizmor Findings | |
| run: nix develop -c zizmor --pedantic --no-exit-codes --config zizmor.yml . | |
| - name: Fail on High-Severity Zizmor Findings | |
| run: nix develop -c zizmor --pedantic --min-severity high --config zizmor.yml . |