ci: add zizmor workflow and pin all GitHub Actions to SHA hashes (#5237)

This commit is contained in:
Benji Visser 2026-03-25 12:28:41 -04:00 committed by GitHub
parent e909d3e4a1
commit f84563175f
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
15 changed files with 92 additions and 41 deletions

View file

@ -18,12 +18,13 @@ jobs:
id-token: write
steps:
- name: Checkout repository
uses: actions/checkout@v4
uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
with:
fetch-depth: 1
persist-credentials: false
- name: Run Claude Code Review
id: claude-review
uses: anthropics/claude-code-action@v1
uses: anthropics/claude-code-action@0ee1beea589a67d33340072691a5d42abec7ae6b # v1
with:
claude_code_oauth_token: ${{ secrets.CLAUDE_CODE_OAUTH_TOKEN }}
plugin_marketplaces: 'https://github.com/anthropics/claude-code.git'