Merge pull request #296 from smallstep/carl/disable-ghas-by-default

ci: Disable zizmor GitHub Advanced Security upload by default

Author: tashian

.github/workflows/actionci.yml

@@ -17,7 +17,7 @@ on:
         description: Upload zizmor results to GitHub Advanced Security
         required: false
         type: boolean
-        default: true
+        default: false
 
 permissions:
   contents: read

.github/workflows/frizbee.yml

@@ -4,7 +4,7 @@ on:
 
 jobs:
   frizbee:
-    name: Check action pinning
+    name: frizbee
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2

.github/workflows/goCI.yml

@@ -145,12 +145,6 @@ jobs:
       PAT: ${{ secrets.PAT }}
       CODECOV_TOKEN: ${{ secrets.CODECOV_TOKEN }}
 
-  zizmor:
-    uses: ./.github/workflows/zizmor.yml
-
-  frizbee:
-    uses: ./.github/workflows/frizbee.yml
-
   build:
     uses: ./.github/workflows/goBuild.yml
     if: inputs.run-build

.github/workflows/zizmor.yml

@@ -5,11 +5,11 @@ on:
       advanced-security:
         description: Upload results to GitHub Advanced Security
         type: boolean
-        default: true
+        default: false
 
 jobs:
   zizmor:
-    name: Scan GitHub workflows
+    name: zizmor
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2