immich-app/devtools
1
0
Fork 0
mirror of https://github.com/immich-app/devtools.git synced 2026-09-30 13:23:00 +08:00
Code Issues Packages Projects Releases Wiki Activity

feat: use app token for shared zizmor workflow (#1611)

Browse Source
This commit is contained in:
bo0tzz
2026-05-19 12:44:09 +02:00
committed by GitHub
parent 38125ae7ca
commit ff26356692
2 changed files with 9 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.github/workflows/shared-zizmor.yml
+8
View File
@@ -22,5 +22,13 @@ jobs:
with: with:
persist-credentials: false persist-credentials: false
- id: token
uses: immich-app/devtools/actions/create-workflow-token@caa599d954228439ea3e8ce1c3328f41ab120ee6 # create-workflow-token-action-v2.0.0
with:
client-id: ${{ secrets.PUSH_O_MATIC_APP_CLIENT_ID }}
private-key: ${{ secrets.PUSH_O_MATIC_APP_KEY }}
- name: Run zizmor 🌈 - name: Run zizmor 🌈
uses: zizmorcore/zizmor-action@b1d7e1fb5de872772f31590499237e7cce841e8e # v0.5.3 uses: zizmorcore/zizmor-action@b1d7e1fb5de872772f31590499237e7cce841e8e # v0.5.3
with:
token: ${{ steps.token.outputs.token }}
tf/deployment/modules/shared/github/org/repo-files/.github/workflows/org-zizmor.yml
Vendored
+1
View File
@@ -13,3 +13,4 @@ jobs:
actions: read actions: read
contents: read contents: read
security-events: write security-events: write
secrets: inherit