ci: Add zizmor pre-commit hook

Even though it's pretty new, zizmor has already established itself as a very potent static analysis tool for GitHub Actions. Let's give it a go to see what it has to say on our current CI.
aai-institute · Jan 6, 2025 · ecb51f6 · ecb51f6
1 parent 08b4d3a
commit ecb51f6
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/.pre-commit-config.yaml b/.pre-commit-config.yaml
@@ -41,3 +41,8 @@ repos:
     hooks:
       - id: uv-lock
         name: Lock project dependencies
+  - repo: https://github.com/woodruffw/zizmor-pre-commit
+    rev: v1.0.0
+    hooks:
+      - id: zizmor
+        args: [--min-severity=medium]