v0.5.2

What's Changed

• zizmor 1.23.1 is now the default used by this action.

Full Changelog: v0.5.1...v0.5.2

v0.5.1

What's Changed

• zizmor 1.23.0 is now the default used by this action.

Full Changelog: v0.5.0...v0.5.1

v0.5.0

What's Changed

• Expose output-file as an output when advanced-security: true by @unlobito in #87

New Contributors

• @unlobito made their first contribution in #87

Full Changelog: v0.4.1...v0.5.0

v0.4.1

This version fixes an error in the 0.4.0 release that prevented non-relative use
of the action.

What's Changed

• Fix version file path by @woodruffw in #83

Full Changelog: v0.4.0...v0.4.1

v0.4.0

This new version of zizmor-action brings two major changes:

• The new fail-on-no-inputs option can be used to control whether
  zizmor-action fails if no inputs were collected by zizmor. The default
  remains true, reflecting the pre-existing behavior.

• The action's use of the official zizmor Docker images is now fully
  hash-checked internally, preventing accidental or malicious modification
  to the images. This also means that subsequent releases of zizmor
  will induce a release of this action, rather than the action always picking
  up the latest version by default.

What's Changed

• docs: extended permissions required for internal repos by @AntoineSebert in #61
• docs: clarify description of "token" to indicate it is only used for online audits by @rmuir in #63
• Hash-check zizmor Docker images by @woodruffw in #68
• Add fail-on-no-inputs option by @woodruffw in #67

New Contributors

• @AntoineSebert made their first contribution in #61
• @rmuir made their first contribution in #63

Full Changelog: v0.3.0...v0.4.0

v0.3.0

What's Changed

• README: fix troubleshooting link by @woodruffw in #50
• README: add a troubleshooting section about Advanced Security by @woodruffw in #51
• feat: Support a config option by @naokihaba in #56

New Contributors

• @naokihaba made their first contribution in #56

Full Changelog: v0.2.0...v0.3.0

v0.2.0

What's Changed

• feat: add support for color input by @birjj in #37
• Adding option for GitHub annotations by @abdelq in #45

New Contributors

• @birjj made their first contribution in #37
• @abdelq made their first contribution in #45

Full Changelog: v0.1.2...v0.2.0

v0.1.2

What's Changed

• fix: allow version prefix of v by @martincostello in #31

New Contributors

• @martincostello made their first contribution in #31

Full Changelog: v0.1.1...v0.1.2

v0.1.1

refactor: run `zizmor` via Docker (#19)

v0.0.3

README: 🌈

Signed-off-by: William Woodruff <william@yossarian.net>