ci: add zizmor, fix found issues - #5387

Open

kolyshkin wants to merge 7 commits into

opencontainers:mainfrom

kolyshkin:add-zizmor

Commits on Aug 28, 2026

ci: pin actions to commit hashes

kolyshkin
and
claude
committed
1979774
ci: harden workflows as suggested by zizmor

kolyshkin
and
claude
committed
f79189c
dependabot: add cooldown
kolyshkin
committed
3bad6dc
ci: add zizmor job

kolyshkin
and
claude
committed
8051c5c
ci: narrow down scheduled.yml permissions

kolyshkin
and
claude
committed
849f00e
ci: add concurrency limits

kolyshkin
and
claude
committed
a79014b
ci: fix up job permissions

kolyshkin
and
claude
committed
211b204