diff --git a/.editorconfig b/.editorconfig
new file mode 100644
index 0000000..2d70100
--- /dev/null
+++ b/.editorconfig
@@ -0,0 +1,44 @@
+# EditorConfig is awesome: https://EditorConfig.org
+
+root = true
+
+[*]
+insert_final_newline = true
+charset = utf-8
+trim_trailing_whitespace = true
+end_of_line = lf
+
+[*.py]
+indent_style = space
+indent_size = 4
+
+[*.lark]
+indent_style = space
+
+[*.{yml,yaml}]
+indent_style = space
+indent_size = 2
+
+[*.json]
+indent_style = space
+indent_size = 4
+
+[*.toml]
+indent_style = space
+indent_size = 4
+
+[*.md]
+charset = latin1
+indent_style = space
+indent_size = 2
+# 2 trailing spaces indicate line breaks.
+trim_trailing_whitespace = false
+
+[*.{rst,txt}]
+indent_style = space
+indent_size = 4
+
+[{*.ini,.bandit,.flake8}]
+charset = latin1
+indent_style = space
+indent_size = 4
diff --git a/.github/workflows/zizmor.yml b/.github/workflows/zizmor.yml
index ba6c4f1..727ebb1 100644
--- a/.github/workflows/zizmor.yml
+++ b/.github/workflows/zizmor.yml
@@ -4,14 +4,14 @@ name: Zizmor
 
 on:
   push:
-    branches: ['master', 'main']
+    branches: [ 'master', 'main' ]
   pull_request:
-    branches: ['**']
+    branches: [ '**' ]
   workflow_dispatch:
   schedule:
     - cron: '0 0 * * 6'
 
-permissions: {}
+permissions: { }
 
 concurrency:
   group: '${{ github.workflow }}-${{ github.ref }}'
@@ -41,4 +41,4 @@ jobs:
           # The two modes are mutually exclusive: advanced-security must be false for
           # annotations to take effect.
           advanced-security: false
-          annotations: true
\ No newline at end of file
+          annotations: true