From 5868140ec142673ef19570c76ae5e966140ffdc7 Mon Sep 17 00:00:00 2001
From: M Bussonnier <bussonniermatthias@gmail.com>
Date: Mon, 14 Sep 2026 13:21:47 +0200
Subject: [PATCH] MAINT: Switch zizmor to the github action

repo-review does not detect it otherwise
---
 .github/workflows/zizmor.yml | 18 ++----------------
 1 file changed, 2 insertions(+), 16 deletions(-)

diff --git a/.github/workflows/zizmor.yml b/.github/workflows/zizmor.yml
index fd67ffec4..d0ca7eb0c 100644
--- a/.github/workflows/zizmor.yml
+++ b/.github/workflows/zizmor.yml
@@ -16,24 +16,10 @@ jobs:
       contents: read
       # Needed to upload the results to the code-scanning dashboard.
       security-events: write
+      actions: read
     steps:
       - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
         with:
           persist-credentials: false
-      - name: Install uv
-        uses: astral-sh/setup-uv@20cfd1bf945f4377ade1205e4dbc17946fc9a30d # v10.0.1
       - name: Run zizmor
-        id: zizmor
-        run: uvx zizmor --format=sarif . > results.sarif
-        continue-on-error: true
-        env:
-          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-      - name: Upload SARIF results
-        if: always()
-        uses: github/codeql-action/upload-sarif@cdf488f595d80d6e07e03d4674febd5ab45fa938 # v4.37.9
-        with:
-          sarif_file: results.sarif
-          category: zizmor
-      - name: Fail if zizmor found problems
-        if: steps.zizmor.outcome == 'failure'
-        run: exit 1
+        uses: zizmorcore/zizmor-action@cc914d7f3750a2d13d75c7f184a1060aa0e9d482 # v0.6.4