Skip to content

Commit a897087

Browse files
committed
STAC-25547 drop the unused zizmor GitHub App token from the workflow audit
1 parent 1c78df6 commit a897087

1 file changed

Lines changed: 0 additions & 11 deletions

File tree

‎.github/workflows/lint-workflows.yml‎

Lines changed: 0 additions & 11 deletions
Original file line numberDiff line numberDiff line change
@@ -25,22 +25,11 @@ jobs:
2525
contents: read
2626
runs-on: ubuntu-latest
2727
steps:
28-
- uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 # v3
29-
id: app-token
30-
with:
31-
client-id: ${{ vars.ZIZMOR_GH_APP_CLIENT_ID }}
32-
private-key: ${{ secrets.ZIZMOR_GH_APP_PRIVATE_KEY }}
33-
owner: ${{ github.repository_owner }}
34-
repositories: "renovate-config"
35-
permission-contents: read
36-
3728
- uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
3829
with:
3930
persist-credentials: false
4031

4132
- name: Run zizmor security audit
42-
env:
43-
GH_TOKEN: ${{ steps.app-token.outputs.token }}
4433
run: |
4534
pip install zizmor
4635
zizmor .

0 commit comments

Comments
 (0)