ci: add zizmor security scanning for GitHub Actions workflows - #3053

Open

antonwolfy wants to merge 7 commits into

ci/add-zizmor-security-scan

Commits on Sep 1, 2026

ci: add zizmor security scanning for GitHub Actions workflows
antonwolfy
committed
cecc386
ci: narrow workflow permissions to contents: read
antonwolfy
committed
6c92bde
ci: fix mismatched version comments on action hash pins
antonwolfy
committed
02c082c
ci: add 7-day Dependabot cooldown to all update entries
antonwolfy
committed
aceddb2
ci: set persist-credentials: false on checkout steps
antonwolfy
committed
f2b99b0
ci: pass reusable-workflow inputs via env to avoid template injection
antonwolfy
committed
ed52eaa
ci: gate zizmor job on medium+ severity findings
antonwolfy
committed
ba9d668