Fix permissions for Zizmor

[Nicolapps]

---

By submitting this pull request, I confirm that you can use, modify, copy, and redistribute this contribution, under the terms of your choice.

[pkg-pr-new]

Open in StackBlitz

npm i https://pkg.pr.new/@convex-dev/action-cache@74

commit: 15e4034

[coderabbitai]

Caution

Review failed

Pull request was closed or merged during review

📝 Walkthrough

Walkthrough

The .github/workflows/lint-workflows.yml file is updated to grant the zizmor job write access to security events. A job-scoped permissions block is added under the zizmor job specifying security-events: write, while the workflow-level permissions.contents: read permission remains unchanged. This allows the zizmor job to publish security findings to the repository.

🚥 Pre-merge checks | ✅ 3 | ❌ 1

❌ Failed checks (1 inconclusive)

Check name	Status	Explanation	Resolution
Description check	❓ Inconclusive	The description contains only placeholder text and a contributor agreement with no actual details about the changeset, making it completely uninformative.	Add a brief description explaining why the Zizmor job permissions needed to be updated and what security benefit this change provides.

✅ Passed checks (3 passed)

Check name	Status	Explanation
Title check	✅ Passed	The title 'Fix permissions for Zizmor' directly matches the main change: adding security-events write permissions to the Zizmor job in the workflow.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch nicolas/fix-zizmor-setup

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands and usage tips.}