Revert "CI: remove code scanning again"

This reverts commit c5b593a. try the suggestion from woodruffw/zizmor#291
msys2 · Dec 13, 2024 · c553f33 · c553f33
1 parent c5b593a
commit c553f33
Showing 1 changed file with 7 additions and 1 deletion.
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
@@ -53,6 +53,12 @@ jobs:
           persist-credentials: false
 
       - name: Run zizmor
-        run: pipx run zizmor .
+        run: pipx run zizmor --format sarif . > results.sarif
         env:
           GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Upload SARIF file
+        uses: github/codeql-action/upload-sarif@v3
+        with:
+          sarif_file: results.sarif
+          category: zizmor