feat: use app token for shared zizmor workflow (#1611)

2026-09-30 13:23:00 +08:00 · 2026-05-19 12:44:09 +02:00
parent 38125ae7ca
commit ff26356692
2 changed files with 9 additions and 0 deletions
@@ -22,5 +22,13 @@ jobs:
        with:
          persist-credentials: false

+      - id: token
+        uses: immich-app/devtools/actions/create-workflow-token@caa599d954228439ea3e8ce1c3328f41ab120ee6 # create-workflow-token-action-v2.0.0
+        with:
+          client-id: ${{ secrets.PUSH_O_MATIC_APP_CLIENT_ID }}
+          private-key: ${{ secrets.PUSH_O_MATIC_APP_KEY }}
+
      - name: Run zizmor 🌈
        uses: zizmorcore/zizmor-action@b1d7e1fb5de872772f31590499237e7cce841e8e # v0.5.3
+        with:
+          token: ${{ steps.token.outputs.token }}
@@ -13,3 +13,4 @@ jobs:
      actions: read
      contents: read
      security-events: write
+    secrets: inherit