GHA/checksrc: pass zizmor a GH token, fix warnings found

For a complete, online, check.

After this patch the check takes 30s, up from a fraction of a second.

Also bump CodeQL actions to their latest version.

Closes #18827
This commit is contained in:
Viktor Szakats 2025-10-03 11:43:10 +02:00
parent 4e2edde102
commit 2e5993ab08
No known key found for this signature in database
GPG key ID: B5ABD165E2AEF201
3 changed files with 7 additions and 5 deletions

View file

@ -129,6 +129,8 @@ jobs:
persist-credentials: false
- name: 'zizmor GHA'
env:
GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
run: |
eval "$(/home/linuxbrew/.linuxbrew/bin/brew shellenv)"
zizmor --pedantic .github/workflows/*.yml