From 59ff6bcb8e918d35d31b8e344db07aae1c0fc3ff Mon Sep 17 00:00:00 2001
From: Egor Tensin <egor@tensin.name>
Date: Wed, 21 Oct 2026 02:43:24 +0300
Subject: workflows/ci: add zizmor job

---
 .github/workflows/ci.yml | 14 ++++++++++++++
 1 file changed, 14 insertions(+)

(limited to '.github/workflows/ci.yml')

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 3c8d1f3..194faf2 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -7,6 +7,19 @@ on:
 permissions: {}
 
 jobs:
+  lint:
+    name: Linting
+    runs-on: ubuntu-slim
+    permissions:
+      security-events: write
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v7
+        with:
+          persist-credentials: false
+      - name: Run zizmor
+        uses: zizmorcore/zizmor-action@v0.7.1
+
   test_local:
     strategy:
       matrix:
@@ -58,6 +71,7 @@ jobs:
   aur:
     name: Publish to AUR
     needs:
+      - lint
       - test_local
       - test_docker
     runs-on: ubuntu-latest
-- 
cgit v1.3