Add zizmor security linter to pre-commit configuration

[tsvikas]

Summary

This PR adds zizmor, a security linter for GitHub Actions workflows, to the pre-commit configuration.

Changes

• Added zizmor pre-commit hook (v1.23.1) to .pre-commit-config.yaml
• Added zizmor pre-commit hook configuration to the project template .pre-commit-config.yaml.jinja

Details

Zizmor is a security-focused linter for GitHub Actions workflows that helps identify potential security issues and misconfigurations. The hook is configured to run on all commits and will be automatically updated along with other dependencies during dependency updates.

https://claude.ai/code/session_011EyCivxz6Z1UJVsienHLQe

[sourcery-ai]

Hey - I've left some high level feedback:

• Consider explicitly configuring the zizmor hook to limit its scope to your GitHub Actions workflow paths (e.g., .github/workflows) if you have vendored or non-standard YAML files that shouldn’t be linted, to avoid false positives and unnecessary runtime.
• Ensure the ordering and positioning of the zizmor hook relative to actionlint in both the root and template pre-commit configs is intentional, since changing the sequence can affect how quickly CI feedback is surfaced for workflow issues.

Prompt for AI Agents

Please address the comments from this code review:

## Overall Comments
- Consider explicitly configuring the zizmor hook to limit its scope to your GitHub Actions workflow paths (e.g., `.github/workflows`) if you have vendored or non-standard YAML files that shouldn’t be linted, to avoid false positives and unnecessary runtime.
- Ensure the ordering and positioning of the zizmor hook relative to `actionlint` in both the root and template pre-commit configs is intentional, since changing the sequence can affect how quickly CI feedback is surfaced for workflow issues.

---

Sourcery is free for open source - if you like our reviews please consider sharing them ✨

• X
• Mastodon
• LinkedIn
• Facebook

_{Help me be more useful! Please click 👍 or 👎 on each comment and I'll use the feedback to improve your reviews.}