build(deps): bump actions/checkout from 6.0.1 to 6.0.2 in the github-… #1105

	#
	# This workflow was based on https://docs.zizmor.sh/usage/#use-in-github-actions
	#

	name: GitHub Actions Security Analysis with zizmor 🌈

	on:
	push:
	branches: ["main"]
	pull_request:
	branches: ["**"]

	permissions: {}

	# Only allow one run of the workflow per branch / PR at a time.
	concurrency:
	group: ${{ github.workflow }}-${{ github.event.pull_request.number \|\| github.ref }}
	cancel-in-progress: true

	jobs:
	zizmor:
	name: zizmor latest via PyPI
	runs-on: ubuntu-latest
	permissions:
	security-events: write # needed for SARIF uploads
	contents: read # only needed for private repos
	actions: read # only needed for private repos
	steps:
	- name: Checkout repository
	uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
	with:
	persist-credentials: false

	- name: Install the latest version of uv
	uses: astral-sh/setup-uv@61cb8a9741eeb8a550a1b8544337180c0fc8476b # v7.2.0

	- name: Run zizmor 🌈
	run: uvx zizmor --format=sarif . > results.sarif
	env:
	GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}

	- name: Upload SARIF file
	uses: github/codeql-action/upload-sarif@5d4e8d1aca955e8d8589aabd499c5cae939e33c7 # v4.31.9
	with:
	sarif_file: results.sarif
	category: zizmor

Provide feedback