From 18d41aea0c0cb9845238985f4398a2f6d62cd68a Mon Sep 17 00:00:00 2001
From: Pepe Fagoaga <pepe@prowler.com>
Date: Fri, 10 Apr 2026 08:23:34 +0200
Subject: [PATCH] fix(ci): exclude .lock files from zizmor

---
 .github/workflows/ci-zizmor.yml | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/.github/workflows/ci-zizmor.yml b/.github/workflows/ci-zizmor.yml
index 5962b01efd..888b66992e 100644
--- a/.github/workflows/ci-zizmor.yml
+++ b/.github/workflows/ci-zizmor.yml
@@ -48,7 +48,14 @@ jobs:
         with:
           persist-credentials: false
 
+      - name: Collect workflow files (exclude auto-generated lock files)
+        id: collect
+        run: |
+          files=$(find .github/workflows -name '*.yml' ! -name '*.lock.yml' | sort | tr '\n' ' ')
+          echo "inputs=${files}" >> "$GITHUB_OUTPUT"
+
       - name: Run zizmor
         uses: zizmorcore/zizmor-action@0dce2577a4760a2749d8cfb7a84b7d5585ebcb7d # v0.5.0
         with:
+          inputs: ${{ steps.collect.outputs.inputs }}
           token: ${{ github.token }}