Repository navigation

Cargo VEX: read member manifests, match liveness by origin, withhold mixed and vendored bypasses #5251

	name: Audit GHA Workflows
	on:
	pull_request:
	push:
	branches: [master, main]
	merge_group: {}
	permissions:
	contents: read
	jobs:
	zizmor:
	name: Audit GitHub Actions
	runs-on: ubuntu-latest
	timeout-minutes: 5
	steps:
	- name: Checkout code
	uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
	with:
	persist-credentials: false
	- name: Install zizmor
	run: pip install zizmor==1.30.1
	- name: Run zizmor
	env:
	GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
	run: \|
	if [ -d .github ]; then
	zizmor .github --gh-token "${GITHUB_TOKEN}" --min-severity medium
	fi