diff --git a/.github/zizmor.yml b/.github/zizmor.yml index 2dc7f7dba3..237af95e7b 100644 --- a/.github/zizmor.yml +++ b/.github/zizmor.yml @@ -1,5 +1,5 @@ # Configuration for the zizmor static analysis tool, run via pre-commit in CI -# https://woodruffw.github.io/zizmor/configuration/ +# https://docs.zizmor.sh/configuration/ # # TODO: can we remove the ignores here so that our workflows are more secure? rules: diff --git a/.pre-commit-config.yaml b/.pre-commit-config.yaml index 130aaa554f..5913919d67 100644 --- a/.pre-commit-config.yaml +++ b/.pre-commit-config.yaml @@ -102,7 +102,7 @@ repos: # zizmor detects security vulnerabilities in GitHub Actions workflows. # Additional configuration for the tool is found in `.github/zizmor.yml` - repo: https://github.com/zizmorcore/zizmor-pre-commit - rev: v1.15.2 + rev: v1.16.0 hooks: - id: zizmor