Introduce Zizmore to audit Github actions - #1571

Draft

zetter-rpf wants to merge 7 commits into

mainfrom

Commits on Aug 5, 2026

Add zizmor config ignoring existing GitHub Actions findings
zetter-rpf
committed
58d32f9
Fix zizmor artipacked findings and drop them from the ignore list
zetter-rpf
committed
6562bda
Fix zizmor unpinned-uses findings and drop them from the ignore list
zetter-rpf
committed
4366163
Fix zizmor template-injection findings and drop them from the ignore list
zetter-rpf
committed
f78cd6f
Simplify zizmor config to disable remaining rules outright
zetter-rpf
committed
3a0a804
Run zizmor in CI to catch new GitHub Actions findings
zetter-rpf
committed
599a260
Bump actions/checkout to v4 in the test and test-cypress jobs
zetter-rpf
committed
c27b750