Skip to content

[DOCS] Simplify PR title syntax toward Conventional Commits #8

[DOCS] Simplify PR title syntax toward Conventional Commits

[DOCS] Simplify PR title syntax toward Conventional Commits #8

---
# Standard Overture Maps Foundation security checks for GitHub Actions workflows.
#
# Bundles the following checks:
# - zizmor: Audits GitHub Actions workflow files for security vulnerabilities
# using the 'auditor' persona for thorough coverage.
#
# Designed to run as a GitHub Ruleset required workflow.
#
# SECURITY: This workflow checks out PR branch code for static analysis only.
# No PR code is executed. Write access is limited to uploading SARIF results
# to GitHub Advanced Security.
#
name: OMF Security Checks
on: # zizmor: ignore[concurrency-limits]
pull_request:
types: [opened, reopened, synchronize]
permissions:
contents: read
concurrency:
group: ${{ github.workflow }}-${{ github.ref }}
cancel-in-progress: true
jobs:
zizmor:
name: zizmor
runs-on: ubuntu-latest
permissions:
contents: read
actions: read # to read workflow files for security auditing
security-events: write # to upload SARIF results to GitHub Advanced Security
steps:
- name: Checkout
uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
with:
persist-credentials: false
- name: Run zizmor 🌈
uses: zizmorcore/zizmor-action@192e21d79ab29983730a13d1382995c2307fbcaa # v0.5.7
with:
persona: pedantic
advanced-security: false # Use GH PR Annotations instead of uploading SARIF results for better visibility in the PR