(beam) 01/01: Revert "remove zizmor (#39355)"

[de...@apache.org]

This is an automated email from the ASF dual-hosted git repository.

derrickaw pushed a commit to branch revert-39355-20260716_revertZizmorCheck
in repository https://gitbox.apache.org/repos/asf/beam.git

commit dcf99538ee82477895c6f8248439b31b01354597
Author: Derrick Williams <my...@gmail.com>
AuthorDate: Fri Jul 17 11:25:23 2026 -0400

    Revert "remove zizmor (#39355)"
    
    This reverts commit 7aa1eaac120ff9fd48ae414f58068be643846d05.
---
 .github/workflows/beam_PreCommit_GHA.yml | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/beam_PreCommit_GHA.yml b/.github/workflows/beam_PreCommit_GHA.yml
index ec8bec0edb7..7ad6b5e6758 100644
--- a/.github/workflows/beam_PreCommit_GHA.yml
+++ b/.github/workflows/beam_PreCommit_GHA.yml
@@ -42,7 +42,7 @@ permissions:
   packages: read
   pages: read
   repository-projects: read
-  security-events: read
+  security-events: write
   statuses: read
 
 # This allows a subsequently queued workflow run to interrupt previous runs
@@ -80,6 +80,10 @@ jobs:
         comment_phrase: ${{ matrix.job_phrase }}
         github_token: ${{ secrets.GITHUB_TOKEN }}
         github_job: ${{ matrix.job_name }} (${{ matrix.job_phrase }})
+    - name: Run zizmor
+      uses: zizmorcore/zizmor-action@6599ee8b7a49aef6a770f63d261d214911a7ce02 # v0.6.0
+      with:
+        advanced-security: true
     - name: Setup environment
       uses: ./.github/actions/setup-environment-action
       with: