Update zizmorcore/zizmor-action action to v0.5.0 #56

	---
	name: Checks

	on:
	pull_request:
	push:
	branches:
	- main

	permissions: {}
	concurrency:
	group: ${{ github.workflow }}-${{ github.ref }}

	jobs:
	biome:
	runs-on: ubuntu-24.04-arm

	permissions:
	contents: read

	steps:
	- name: Checkout
	uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
	with:
	persist-credentials: false

	- name: Setup Biome
	uses: biomejs/setup-biome@29711cbb52afee00eb13aeb30636592f9edc0088 # v2.7.0

	- name: Run Biome
	run: biome ci .


	dist:
	runs-on: ubuntu-24.04-arm

	permissions:
	contents: read

	steps:
	- name: Checkout
	uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
	with:
	persist-credentials: false

	- name: Setup Node.js
	uses: actions/setup-node@6044e13b5dc448c55e2357c09f80417699197238 # v6.2.0
	with:
	node-version: 24
	cache: yarn

	- name: Install dependencies
	run: yarn install --immutable

	- name: Build
	run: yarn run build

	- name: Check for differences
	run: git diff --exit-code


	zizmor:
	runs-on: ubuntu-24.04-arm

	permissions:
	contents: read

	steps:
	- name: Checkout
	uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
	with:
	persist-credentials: false

	- name: Run zizmor
	uses: zizmorcore/zizmor-action@0dce2577a4760a2749d8cfb7a84b7d5585ebcb7d # v0.5.0
	with:
	advanced-security: false
	annotations: true
	min-severity: low
	persona: pedantic


	all-checks-passed:
	if: always()
	runs-on: ubuntu-24.04-arm

	permissions: {}

	needs:
	- biome
	- dist
	- zizmor

	steps:
	- name: Check if needed jobs succeeded
	uses: re-actors/alls-green@05ac9388f0aebcb5727afa17fcccfecd6f8ec5fe # v1.2.2
	with:
	jobs: ${{ toJSON(needs) }}

Navigation Menu