#3582 feat(templates): Run zizmor to harden GitHub Action workflows in tap, target and mapper templates
Pull request opened by
edgarrmondragon
SSIA
Summary by Sourcery
Integrate zizmor security analysis into tap, target, and mapper templates and wire it into pre-commit and GitHub Actions workflows.
New Features:
• Add zizmor pre-commit hook to tap, target, and mapper cookiecutter templates to statically analyze GitHub Actions workflows.
• Introduce a dedicated run-zizmor GitHub Actions workflow in each template to run security analysis and upload SARIF results to GitHub.
• Extend the root pre-commit configuration to validate the new run-zizmor workflow files in generated templates.
Enhancements:
• Annotate templated tox run steps in test workflows to suppress false-positive zizmor template injection warnings.
meltano/sdk